Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Knowledge Partner
Knowledge Partner
210 views

AD Group Rename handling in subscriber channel


It doesn't seem that the pre-built AD driver in Designer has anything to
handle renaming a group in eDir to AD in the subscriber channel. There
ARE some policies/rules in the publisher channel (AD to eDir) for
renames, but not the other way around.

So far with what I have, if I rename the group in eDir, it does
eventually get to AD, but the "Group Name (pre-windows 2000)" in the AD
MMC (which I believe is the samAccountName) doesn't get changed.

Note, I'm using the "default" schema mapping.


--
The opinions expressed are my own.
Check out my OES2 Guides:
Installing OES2 SP2:
http://www.novell.com/communities/node/11600/oes2-sp2-installation-guide
Upgrading to OES2 with ID Transfer:
http://www.novell.com/communities/node/11601/oes2-sp2-migration-guide-transfer-id-scenarios
GroupWise Migration with OES2 ID Transfer:
http://www.novell.com/communities/node/11602/groupwise-migration-netware-oes2-sp2-transfer-id
------------------------------------------------------------------------
kjhurni's Profile: http://forums.novell.com/member.php?userid=734
View this thread: http://forums.novell.com/showthread.php?t=454249

Labels (1)
0 Likes
7 Replies
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel

On 4/3/2012 10:56 AM, kjhurni wrote:
>
> It doesn't seem that the pre-built AD driver in Designer has anything to
> handle renaming a group in eDir to AD in the subscriber channel. There
> ARE some policies/rules in the publisher channel (AD to eDir) for
> renames, but not the other way around.
>
> So far with what I have, if I rename the group in eDir, it does
> eventually get to AD, but the "Group Name (pre-windows 2000)" in the AD
> MMC (which I believe is the samAccountName) doesn't get changed.
>
> Note, I'm using the "default" schema mapping.


Can you post trace of a rename in eDir? I am thinking through, and no
policy should be directly needed... Should just flow through... At
first thought.

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel

On 03.04.2012 16:59, Geoffrey Carman wrote:
> On 4/3/2012 10:56 AM, kjhurni wrote:
>>
>> It doesn't seem that the pre-built AD driver in Designer has anything to
>> handle renaming a group in eDir to AD in the subscriber channel. There
>> ARE some policies/rules in the publisher channel (AD to eDir) for
>> renames, but not the other way around.
>>
>> So far with what I have, if I rename the group in eDir, it does
>> eventually get to AD, but the "Group Name (pre-windows 2000)" in the AD
>> MMC (which I believe is the samAccountName) doesn't get changed.
>>
>> Note, I'm using the "default" schema mapping.

>
> Can you post trace of a rename in eDir? I am thinking through, and no
> policy should be directly needed... Should just flow through... At first
> thought.


This behaviour sounds right.

For groups, by default DirXML-ADAliasName is mapped to sAMAccountName in
the smp policy.

A rename will only update the group CN as there is no default policy
that maps rename to sAMAccountName for groups.

You will need to write your own sub-ctp policy
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel

On Tue, 03 Apr 2012 14:56:01 +0000, kjhurni wrote:

> It doesn't seem that the pre-built AD driver in Designer has anything to
> handle renaming a group in eDir to AD in the subscriber channel.


Changing the object name should just flow through. But, not everything in
MAD uses the object name.


> So far with what I have, if I rename the group in eDir, it does
> eventually get to AD, but the "Group Name (pre-windows 2000)" in the AD
> MMC (which I believe is the samAccountName) doesn't get changed.


Right. sAMAccountName (aka "Pre Windows 2000 name") doesn't get changed.
Changing that is a relatively difficult operation, because it has to be
globally unique across the domain. So to change it, you have to come up
with what you think you want it to be, then go check to see if there's
already something named that. If there isn't, fine, you can update it,
but if there is, then you have to figure out what you want to do next.

This is a non-trivial problem to solve, so you're going to have to figure
out what you want to do before any code can be written to do it. So the
default configuration doesn't attempt to handle it at all.

Ideally, this wouldn't be a problem, except that some MAD utilities still
use sAMAccountName to manage things.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel


dgersic;2187045 Wrote:
> On Tue, 03 Apr 2012 14:56:01 +0000, kjhurni wrote:
>
> > It doesn't seem that the pre-built AD driver in Designer has anything

> to
> > handle renaming a group in eDir to AD in the subscriber channel.

>
> Changing the object name should just flow through. But, not everything
> in
> MAD uses the object name.
>
>
> > So far with what I have, if I rename the group in eDir, it does
> > eventually get to AD, but the "Group Name (pre-windows 2000)" in the

> AD
> > MMC (which I believe is the samAccountName) doesn't get changed.

>
> Right. sAMAccountName (aka "Pre Windows 2000 name") doesn't get
> changed.
> Changing that is a relatively difficult operation, because it has to
> be
> globally unique across the domain. So to change it, you have to come
> up
> with what you think you want it to be, then go check to see if there's
> already something named that. If there isn't, fine, you can update it,
> but if there is, then you have to figure out what you want to do next.
>
> This is a non-trivial problem to solve, so you're going to have to
> figure
> out what you want to do before any code can be written to do it. So
> the
> default configuration doesn't attempt to handle it at all.
>
> Ideally, this wouldn't be a problem, except that some MAD utilities
> still
> use sAMAccountName to manage things.
>
>
> --
> --------------------------------------------------------------------------
> David Gersic
> dgersic_@_niu.edu
> Knowledge Partner
> http://forums.novell.com
>
> Please post questions in the forums. No support provided via
> email.


Thanks David. I guess we'll have to determine if any of our tools
still use the "old" stuff. I'm thinking not, but I'll have to query.
For the time being AD is really only used for MS SQL authentication and
soon to be Citrix XenApp 6 or whatever the latest version is.


--
The opinions expressed are my own.
Check out my OES2 Guides:
Installing OES2 SP2:
http://www.novell.com/communities/node/11600/oes2-sp2-installation-guide
Upgrading to OES2 with ID Transfer:
http://www.novell.com/communities/node/11601/oes2-sp2-migration-guide-transfer-id-scenarios
GroupWise Migration with OES2 ID Transfer:
http://www.novell.com/communities/node/11602/groupwise-migration-netware-oes2-sp2-transfer-id
------------------------------------------------------------------------
kjhurni's Profile: http://forums.novell.com/member.php?userid=734
View this thread: http://forums.novell.com/showthread.php?t=454249

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel


I hope I scrubbed this sufficiently:


Code:
--------------------

[04/03/12 11:21:17.726]:DEC-AD ST:Start transaction.
[04/03/12 11:21:17.737]:DEC-AD ST:Processing events for transaction.
[04/03/12 11:21:17.739]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.761]:DEC-AD ST:Applying event transformation policies.
[04/03/12 11:21:17.761]:DEC-AD ST:Applying policy: %+C%14CEvent Transform%-C.
[04/03/12 11:21:17.762]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.762]:DEC-AD ST: Evaluating selection criteria for rule 'Rename: User - set up variables'.
[04/03/12 11:21:17.763]:DEC-AD ST: (if-operation equal "rename") = TRUE.
[04/03/12 11:21:17.764]:DEC-AD ST: (if-class-name equal "User") = FALSE.
[04/03/12 11:21:17.764]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.765]:DEC-AD ST: Evaluating selection criteria for rule 'Rename: User - set dest CN to new name'.
[04/03/12 11:21:17.766]:DEC-AD ST: (if-local-variable 'new-name' available) = FALSE.
[04/03/12 11:21:17.767]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.767]:DEC-AD ST: Evaluating selection criteria for rule 'Rename: User - if alias is not empty, remove values'.
[04/03/12 11:21:17.768]:DEC-AD ST: (if-local-variable 'curr-alias' available) = FALSE.
[04/03/12 11:21:17.769]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.769]:DEC-AD ST: Evaluating selection criteria for rule 'Modify: User, Full Name changing and empty - rename from src-dn'.
[04/03/12 11:21:17.769]:DEC-AD ST: (if-op-attr 'Full Name' available) = FALSE.
[04/03/12 11:21:17.770]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.770]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.771]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.775]:DEC-AD ST:Subscriber processing rename for \VAULT\ABC\Groups\Citrix\Group for Kevin rename3.
[04/03/12 11:21:17.776]:DEC-AD ST:Applying command transformation policies.
[04/03/12 11:21:17.776]:DEC-AD ST:Applying policy: %+C%14CChange eDir ou to AD department field%-C.
[04/03/12 11:21:17.776]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.777]:DEC-AD ST: Evaluating selection criteria for rule 'Change edir ou to AD department field'.
[04/03/12 11:21:17.777]:DEC-AD ST: (if-class-name equal "User") = FALSE.
[04/03/12 11:21:17.777]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.777]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.778]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.781]:DEC-AD ST:Applying policy: %+C%14CCommand Transform%-C.
[04/03/12 11:21:17.781]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.781]:DEC-AD ST: Evaluating selection criteria for rule 'Add: User - change dest-dn to eDir CN'.
[04/03/12 11:21:17.782]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.782]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.782]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.782]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.785]:DEC-AD ST:Applying policy: %+C%14CPassword(Sub)-Transform Distribution Password%-C.
[04/03/12 11:21:17.786]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.786]:DEC-AD ST: Evaluating selection criteria for rule 'Convert adds of the nspmDistributionPassword attribute to password elements'.
[04/03/12 11:21:17.787]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.787]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.787]:DEC-AD ST: Evaluating selection criteria for rule 'Block modifies for failed password publish operations if reset password is false'.
[04/03/12 11:21:17.788]:DEC-AD ST: (if-global-variable 'reset-external-password-on-failure' equal "false") = TRUE.
[04/03/12 11:21:17.788]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.788]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.788]:DEC-AD ST: Evaluating selection criteria for rule 'Convert modifies of a nspmDistributionPassword attribute to a modify password operation'.
[04/03/12 11:21:17.789]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.789]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.789]:DEC-AD ST: Evaluating selection criteria for rule 'Block empty modify operations'.
[04/03/12 11:21:17.789]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.790]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.790]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.790]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.793]:DEC-AD ST:Applying policy: %+C%14CPassword(Sub)-Default Password Policy%-C.
[04/03/12 11:21:17.793]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.793]:DEC-AD ST: Evaluating selection criteria for rule 'On User add, provide default password of Surname if no password exists'.
[04/03/12 11:21:17.793]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.794]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.794]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.794]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.796]:DEC-AD ST:Applying policy: %+C%14CPassword(Sub)-Check Password GCV%-C.
[04/03/12 11:21:17.797]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.797]:DEC-AD ST: Evaluating selection criteria for rule 'Block subscribing to passwords when objects are added'.
[04/03/12 11:21:17.797]:DEC-AD ST: (if-global-variable 'enable-password-subscribe' equal "false") = FALSE.
[04/03/12 11:21:17.798]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.798]:DEC-AD ST: Evaluating selection criteria for rule 'Block subscribing to password modifications'.
[04/03/12 11:21:17.798]:DEC-AD ST: (if-global-variable 'enable-password-subscribe' equal "false") = FALSE.
[04/03/12 11:21:17.799]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.799]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.799]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.801]:DEC-AD ST:Applying policy: %+C%14CPassword(Sub)-Add Password Payload%-C.
[04/03/12 11:21:17.802]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.802]:DEC-AD ST: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
[04/03/12 11:21:17.802]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.802]:DEC-AD ST: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:17.803]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.803]:DEC-AD ST: Evaluating selection criteria for rule 'Add payload data to a reset password from a failed password publish operation'.
[04/03/12 11:21:17.803]:DEC-AD ST: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:17.803]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.804]:DEC-AD ST: Evaluating selection criteria for rule 'Add payload data to password operations'.
[04/03/12 11:21:17.804]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.804]:DEC-AD ST: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:17.804]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.805]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.805]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="Group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.808]:DEC-AD ST:Filtering out notification-only attributes.
[04/03/12 11:21:17.808]:DEC-AD ST:Fixing up association references.
[04/03/12 11:21:17.808]:DEC-AD ST:Applying schema mapping policies to output.
[04/03/12 11:21:17.808]:DEC-AD ST:Applying policy: %+C%14CSchemaMapping%-C.
[04/03/12 11:21:17.809]:DEC-AD ST: Mapping class-name 'Group' to 'group'.
[04/03/12 11:21:17.809]:DEC-AD ST:Applying output transformation policies.
[04/03/12 11:21:17.809]:DEC-AD ST:Applying policy: %+C%14COutput Transform%-C.
[04/03/12 11:21:17.810]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.810]:DEC-AD ST: Evaluating selection criteria for rule 'Add: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:17.810]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.811]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.811]:DEC-AD ST: Evaluating selection criteria for rule 'Modify: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:17.811]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.812]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.812]:DEC-AD ST: Evaluating selection criteria for rule 'Add: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:17.813]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.813]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.813]:DEC-AD ST: Evaluating selection criteria for rule 'Modify: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:17.814]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.814]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.814]:DEC-AD ST: Evaluating selection criteria for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
[04/03/12 11:21:17.815]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.815]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.815]:DEC-AD ST: Evaluating selection criteria for rule 'Strip add/modify of DirXML-ADContext'.
[04/03/12 11:21:17.816]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.816]:DEC-AD ST: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:17.816]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.817]:DEC-AD ST: Evaluating selection criteria for rule 'Convert userPrincipalName to name@domain.com'.
[04/03/12 11:21:17.817]:DEC-AD ST: (if-op-attr 'userPrincipalName' available) = FALSE.
[04/03/12 11:21:17.818]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.818]:DEC-AD ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
[04/03/12 11:21:17.818]:DEC-AD ST: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:17.818]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.819]:DEC-AD ST: Evaluating selection criteria for rule 'Convert Login Allowed Time Map to logonHours form'.
[04/03/12 11:21:17.819]:DEC-AD ST: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:17.819]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.819]:DEC-AD ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
[04/03/12 11:21:17.820]:DEC-AD ST: (if-operation equal "add") = FALSE.
[04/03/12 11:21:17.820]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.820]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.820]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.823]:DEC-AD ST:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
[04/03/12 11:21:17.824]:DEC-AD ST: Applying to rename #1.
[04/03/12 11:21:17.824]:DEC-AD ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
[04/03/12 11:21:17.824]:DEC-AD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:17.825]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.825]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.826]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.829]:DEC-AD ST:Submitting document to subscriber shim:
[04/03/12 11:21:17.829]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.832]:DEC-AD ST:Remote Interface Driver: Sending...
[04/03/12 11:21:17.832]:DEC-AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20120403152117.619Z" class-name="group" event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2" qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
<association state="associated">1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:17.835]:DEC-AD ST:Remote Interface Driver: Document sent.
[04/03/12 11:21:17.863]:DEC-AD :Remote Interface Driver: Received.
[04/03/12 11:21:17.863]:DEC-AD :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" level="success"/>
</output>
</nds>
[04/03/12 11:21:17.864]:DEC-AD :Remote Interface Driver: Received document for subscriber channel
[04/03/12 11:21:17.865]:DEC-AD ST:SubscriptionShim.execute() returned:
[04/03/12 11:21:17.865]:DEC-AD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" level="success"/>
</output>
</nds>
[04/03/12 11:21:17.866]:DEC-AD ST:Applying input transformation policies.
[04/03/12 11:21:17.866]:DEC-AD ST:Applying policy: %+C%14CInput Transform%-C.
[04/03/12 11:21:17.867]:DEC-AD ST: Applying to status #1.
[04/03/12 11:21:17.867]:DEC-AD ST: Evaluating selection criteria for rule 'Street Address: Convert CR-LF to LF'.
[04/03/12 11:21:17.867]:DEC-AD ST: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:17.868]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.868]:DEC-AD ST: Evaluating selection criteria for rule 'Convert logonHours to Login Allowed Time Map form'.
[04/03/12 11:21:17.868]:DEC-AD ST: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:17.868]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.868]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.869]:DEC-AD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" level="success"/>
</output>
</nds>
[04/03/12 11:21:17.870]:DEC-AD ST:Applying XSLT policy: %+C%14CInput+Transform+SS%-C.
[04/03/12 11:21:17.873]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.873]:DEC-AD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" level="success"/>
</output>
</nds>
[04/03/12 11:21:17.874]:DEC-AD ST:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
[04/03/12 11:21:17.874]:DEC-AD ST: Applying to status #1.
[04/03/12 11:21:17.875]:DEC-AD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
[04/03/12 11:21:17.875]:DEC-AD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:17.876]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.876]:DEC-AD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the DirXML data store password'.
[04/03/12 11:21:17.876]:DEC-AD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:17.877]:DEC-AD ST: Rule rejected.
[04/03/12 11:21:17.877]:DEC-AD ST:Policy returned:
[04/03/12 11:21:17.877]:DEC-AD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20110211_120000" instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD" version="3.5.14">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1" level="success"/>
</output>
</nds>
[04/03/12 11:21:17.878]:DEC-AD ST:Applying schema mapping policies to input.
[04/03/12 11:21:17.878]:DEC-AD ST:Applying policy: %+C%14CSchemaMapping%-C.
[04/03/12 11:21:17.879]:DEC-AD ST:Resolving association references.
[04/03/12 11:21:17.879]:DEC-AD ST:Processing returned document.
[04/03/12 11:21:17.882]:DEC-AD ST:Processing operation <status> for .
[04/03/12 11:21:17.885]:DEC-AD :Remote Interface Driver: Waiting for receive...
[04/03/12 11:21:17.895]:DEC-AD ST:
DirXML Log Event -------------------
Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
Channel: Subscriber
Object: \VAULT\ABC\Groups\Citrix\Group for Kevin rename3
Status: Success
[04/03/12 11:21:17.896]:DEC-AD ST:End transaction.
[04/03/12 11:21:52.472]:DEC-AD :Remote Interface Driver: Received.
[04/03/12 11:21:52.472]:DEC-AD :
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.475]:DEC-AD :Remote Interface Driver: Received document for publisher channel
[04/03/12 11:21:52.475]:DEC-AD :Remote Interface Driver: Waiting for receive...
[04/03/12 11:21:52.477]:DEC-AD PT:Receiving DOM document from application.
[04/03/12 11:21:52.477]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.480]:DEC-AD PT:Applying input transformation policies.
[04/03/12 11:21:52.480]:DEC-AD PT:Applying policy: %+C%14CInput Transform%-C.
[04/03/12 11:21:52.480]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.481]:DEC-AD PT: Evaluating selection criteria for rule 'Street Address: Convert CR-LF to LF'.
[04/03/12 11:21:52.481]:DEC-AD PT: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:52.481]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.481]:DEC-AD PT: Evaluating selection criteria for rule 'Convert logonHours to Login Allowed Time Map form'.
[04/03/12 11:21:52.482]:DEC-AD PT: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:52.482]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.482]:DEC-AD PT: Applying to rename #2.
[04/03/12 11:21:52.482]:DEC-AD PT: Evaluating selection criteria for rule 'Street Address: Convert CR-LF to LF'.
[04/03/12 11:21:52.483]:DEC-AD PT: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:52.483]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.483]:DEC-AD PT: Evaluating selection criteria for rule 'Convert logonHours to Login Allowed Time Map form'.
[04/03/12 11:21:52.484]:DEC-AD PT: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:52.484]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.484]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.484]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.487]:DEC-AD PT:Applying XSLT policy: %+C%14CInput+Transform+SS%-C.
[04/03/12 11:21:52.488]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.488]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.491]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
[04/03/12 11:21:52.491]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.491]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
[04/03/12 11:21:52.492]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.492]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.492]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the DirXML data store password'.
[04/03/12 11:21:52.493]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.493]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.493]:DEC-AD PT: Applying to rename #2.
[04/03/12 11:21:52.494]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
[04/03/12 11:21:52.494]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.495]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.495]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the DirXML data store password'.
[04/03/12 11:21:52.495]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.496]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.496]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.496]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.501]:DEC-AD PT:Applying schema mapping policies to input.
[04/03/12 11:21:52.502]:DEC-AD PT:Applying policy: %+C%14CSchemaMapping%-C.
[04/03/12 11:21:52.502]:DEC-AD PT: Mapping class-name 'group' to 'Group'.
[04/03/12 11:21:52.502]:DEC-AD PT: Mapping class-name 'group' to 'Group'.
[04/03/12 11:21:52.503]:DEC-AD PT:Resolving association references.
[04/03/12 11:21:52.503]:DEC-AD PT:Applying event transformation policies.
[04/03/12 11:21:52.503]:DEC-AD PT:Applying policy: %+C%14CEvent Transform%-C.
[04/03/12 11:21:52.503]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.503]:DEC-AD PT: Evaluating selection criteria for rule 'Veto User Moves'.
[04/03/12 11:21:52.504]:DEC-AD PT: (if-operation equal "move") = TRUE.
[04/03/12 11:21:52.504]:DEC-AD PT: (if-class-name equal "User") = FALSE.
[04/03/12 11:21:52.504]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.504]:DEC-AD PT: Applying to rename #2.
[04/03/12 11:21:52.505]:DEC-AD PT: Evaluating selection criteria for rule 'Veto User Moves'.
[04/03/12 11:21:52.505]:DEC-AD PT: (if-operation equal "move") = FALSE.
[04/03/12 11:21:52.505]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.505]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.506]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
<rename class-name="Group" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.510]:DEC-AD PT:Applying publisher filter.
[04/03/12 11:21:52.510]:DEC-AD PT:Publisher processing move for CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com.
[04/03/12 11:21:52.510]:DEC-AD PT:Applying command transformation policies.
[04/03/12 11:21:52.510]:DEC-AD PT:Applying policy: %+C%14CCommand Transform%-C.
[04/03/12 11:21:52.511]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.511]:DEC-AD PT: Evaluating selection criteria for rule 'Add: specify aux class and context'.
[04/03/12 11:21:52.511]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.511]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.512]:DEC-AD PT: Evaluating selection criteria for rule 'Add: If User, rebuild dest-dn & strip CN, DirXML-ADAliasName attrs'.
[04/03/12 11:21:52.512]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.512]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.512]:DEC-AD PT: Evaluating selection criteria for rule 'Add: If User, check local variables and set attrs as needed'.
[04/03/12 11:21:52.513]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.513]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.513]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: Set DirXML-ADContext value'.
[04/03/12 11:21:52.513]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.514]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.514]:DEC-AD PT: Evaluating selection criteria for rule 'Set Equivalent To Me'.
[04/03/12 11:21:52.514]:DEC-AD PT: (if-op-attr 'Member' available) = FALSE.
[04/03/12 11:21:52.514]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.514]:DEC-AD PT: Evaluating selection criteria for rule 'Remove Equivalent To Me'.
[04/03/12 11:21:52.515]:DEC-AD PT: (if-op-attr 'Member' changing-from ".+") = FALSE.
[04/03/12 11:21:52.515]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.515]:DEC-AD PT: Evaluating selection criteria for rule 'Delete: Convert to Disable'.
[04/03/12 11:21:52.516]:DEC-AD PT: (if-operation equal "delete") = FALSE.
[04/03/12 11:21:52.516]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.516]:DEC-AD PT: Evaluating selection criteria for rule 'Veto Moves'.
[04/03/12 11:21:52.516]:DEC-AD PT: (if-operation equal "move") = TRUE.
[04/03/12 11:21:52.516]:DEC-AD PT: (if-class-name equal "User") = FALSE.
[04/03/12 11:21:52.517]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.517]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.517]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.519]:DEC-AD PT:Applying XSLT policy: %+C%14CCommand+Transform+SS%-C.
[04/03/12 11:21:52.520]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.520]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.522]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
[04/03/12 11:21:52.522]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.522]:DEC-AD PT: Evaluating selection criteria for rule 'On User add, provide default password of Surname if no password exists'.
[04/03/12 11:21:52.523]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.523]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.523]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.523]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.525]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
[04/03/12 11:21:52.525]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.525]:DEC-AD PT: Evaluating selection criteria for rule 'Block publishing passwords to DirXML data store when adding a object'.
[04/03/12 11:21:52.526]:DEC-AD PT: (if-global-variable 'enable-password-publish' equal "false") = TRUE.
[04/03/12 11:21:52.526]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.526]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.526]:DEC-AD PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the DirXML data store'.
[04/03/12 11:21:52.527]:DEC-AD PT: (if-global-variable 'enable-password-publish' equal "false") = TRUE.
[04/03/12 11:21:52.527]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.527]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.527]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.528]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.529]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
[04/03/12 11:21:52.530]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.530]:DEC-AD PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
[04/03/12 11:21:52.530]:DEC-AD PT: (if-global-variable 'publish-password-to-dp' equal "true") = TRUE.
[04/03/12 11:21:52.531]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.531]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.531]:DEC-AD PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
[04/03/12 11:21:52.531]:DEC-AD PT: (if-global-variable 'publish-password-to-dp' equal "true") = TRUE.
[04/03/12 11:21:52.532]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.532]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.532]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.532]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.534]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
[04/03/12 11:21:52.534]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.535]:DEC-AD PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
[04/03/12 11:21:52.535]:DEC-AD PT: (if-global-variable 'publish-password-to-nds' equal "false") = TRUE.
[04/03/12 11:21:52.535]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.535]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.536]:DEC-AD PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
[04/03/12 11:21:52.536]:DEC-AD PT: (if-global-variable 'publish-password-to-nds' equal "false") = TRUE.
[04/03/12 11:21:52.536]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.537]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.537]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.537]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.539]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
[04/03/12 11:21:52.539]:DEC-AD PT: Applying to move #1.
[04/03/12 11:21:52.539]:DEC-AD PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
[04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.541]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.541]:DEC-AD PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
[04/03/12 11:21:52.541]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.541]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.542]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.542]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.542]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.542]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.542]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
<association>67160b40e106eb43883399ff379ceed1</association>
</parent>
</move>
</input>
</nds>
[04/03/12 11:21:52.544]:DEC-AD PT:Filtering out notification-only attributes.
[04/03/12 11:21:52.544]:DEC-AD PT:Pumping XDS to eDirectory.
[04/03/12 11:21:52.545]:DEC-AD PT:Performing operation move for DEC\Groups\Citrix\Group for Kevin rename3.
[04/03/12 11:21:52.573]:DEC-AD PT:
DirXML Log Event -------------------
Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
Channel: Publisher
Object: CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)
Status: Error
Message: Code(-9039) Element <parent> does not have a valid association.
[04/03/12 11:21:52.583]:DEC-AD PT:Applying publisher filter.
[04/03/12 11:21:52.584]:DEC-AD PT:Publisher processing rename for CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com.
[04/03/12 11:21:52.584]:DEC-AD PT:Applying command transformation policies.
[04/03/12 11:21:52.585]:DEC-AD PT:Applying policy: %+C%14CCommand Transform%-C.
[04/03/12 11:21:52.585]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.585]:DEC-AD PT: Evaluating selection criteria for rule 'Add: specify aux class and context'.
[04/03/12 11:21:52.586]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.586]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.586]:DEC-AD PT: Evaluating selection criteria for rule 'Add: If User, rebuild dest-dn & strip CN, DirXML-ADAliasName attrs'.
[04/03/12 11:21:52.586]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.587]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.587]:DEC-AD PT: Evaluating selection criteria for rule 'Add: If User, check local variables and set attrs as needed'.
[04/03/12 11:21:52.587]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.587]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.588]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: Set DirXML-ADContext value'.
[04/03/12 11:21:52.588]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.589]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.589]:DEC-AD PT: Evaluating selection criteria for rule 'Set Equivalent To Me'.
[04/03/12 11:21:52.589]:DEC-AD PT: (if-op-attr 'Member' available) = FALSE.
[04/03/12 11:21:52.589]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.589]:DEC-AD PT: Evaluating selection criteria for rule 'Remove Equivalent To Me'.
[04/03/12 11:21:52.590]:DEC-AD PT: (if-op-attr 'Member' changing-from ".+") = FALSE.
[04/03/12 11:21:52.590]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.590]:DEC-AD PT: Evaluating selection criteria for rule 'Delete: Convert to Disable'.
[04/03/12 11:21:52.590]:DEC-AD PT: (if-operation equal "delete") = FALSE.
[04/03/12 11:21:52.591]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.591]:DEC-AD PT: Evaluating selection criteria for rule 'Veto Moves'.
[04/03/12 11:21:52.591]:DEC-AD PT: (if-operation equal "move") = FALSE.
[04/03/12 11:21:52.591]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.592]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.592]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.593]:DEC-AD PT:Applying XSLT policy: %+C%14CCommand+Transform+SS%-C.
[04/03/12 11:21:52.594]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.595]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.596]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
[04/03/12 11:21:52.597]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.597]:DEC-AD PT: Evaluating selection criteria for rule 'On User add, provide default password of Surname if no password exists'.
[04/03/12 11:21:52.598]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.598]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.598]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.598]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.600]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
[04/03/12 11:21:52.600]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.600]:DEC-AD PT: Evaluating selection criteria for rule 'Block publishing passwords to DirXML data store when adding a object'.
[04/03/12 11:21:52.601]:DEC-AD PT: (if-global-variable 'enable-password-publish' equal "false") = TRUE.
[04/03/12 11:21:52.601]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.602]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.602]:DEC-AD PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the DirXML data store'.
[04/03/12 11:21:52.602]:DEC-AD PT: (if-global-variable 'enable-password-publish' equal "false") = TRUE.
[04/03/12 11:21:52.602]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.603]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.603]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.603]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.605]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
[04/03/12 11:21:52.605]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.605]:DEC-AD PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
[04/03/12 11:21:52.606]:DEC-AD PT: (if-global-variable 'publish-password-to-dp' equal "true") = TRUE.
[04/03/12 11:21:52.606]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.606]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.607]:DEC-AD PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
[04/03/12 11:21:52.607]:DEC-AD PT: (if-global-variable 'publish-password-to-dp' equal "true") = TRUE.
[04/03/12 11:21:52.607]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.607]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.608]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.608]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.609]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
[04/03/12 11:21:52.610]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.610]:DEC-AD PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
[04/03/12 11:21:52.610]:DEC-AD PT: (if-global-variable 'publish-password-to-nds' equal "false") = TRUE.
[04/03/12 11:21:52.611]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.611]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.611]:DEC-AD PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
[04/03/12 11:21:52.612]:DEC-AD PT: (if-global-variable 'publish-password-to-nds' equal "false") = TRUE.
[04/03/12 11:21:52.612]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.613]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.613]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.613]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.615]:DEC-AD PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
[04/03/12 11:21:52.615]:DEC-AD PT: Applying to rename #1.
[04/03/12 11:21:52.615]:DEC-AD PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
[04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.617]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.617]:DEC-AD PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
[04/03/12 11:21:52.617]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.617]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.618]:DEC-AD PT: (if-operation equal "modify-password") = FALSE.
[04/03/12 11:21:52.618]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.618]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.619]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.619]:DEC-AD PT:
<nds dtdversion="2.2">
<source>
<product version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1" src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
<association>1d0997354af458439b48dae239a6db35</association>
<new-name>Group for Kevin rename3</new-name>
</rename>
</input>
</nds>
[04/03/12 11:21:52.621]:DEC-AD PT:Filtering out notification-only attributes.
[04/03/12 11:21:52.621]:DEC-AD PT:Pumping XDS to eDirectory.
[04/03/12 11:21:52.621]:DEC-AD PT:Performing operation rename for DEC\Groups\Citrix\Group for Kevin rename3.
[04/03/12 11:21:52.622]:DEC-AD PT:Rename not needed.
[04/03/12 11:21:52.623]:DEC-AD PT:
DirXML Log Event -------------------
Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
Channel: Publisher
Object: CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)
Status: Success
[04/03/12 11:21:52.624]:DEC-AD PT:Fixing up association references.
[04/03/12 11:21:52.624]:DEC-AD PT:Applying schema mapping policies to output.
[04/03/12 11:21:52.624]:DEC-AD PT:Applying policy: %+C%14CSchemaMapping%-C.
[04/03/12 11:21:52.625]:DEC-AD PT:Applying output transformation policies.
[04/03/12 11:21:52.625]:DEC-AD PT:Applying policy: %+C%14COutput Transform%-C.
[04/03/12 11:21:52.625]:DEC-AD PT: Applying to status #1.
[04/03/12 11:21:52.625]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:52.626]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.626]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.626]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:52.627]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.627]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.627]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:52.628]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.628]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.628]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:52.629]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.629]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.629]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
[04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.630]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.630]:DEC-AD PT: Evaluating selection criteria for rule 'Strip add/modify of DirXML-ADContext'.
[04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.631]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.631]:DEC-AD PT: Evaluating selection criteria for rule 'Convert userPrincipalName to name@domain.com'.
[04/03/12 11:21:52.631]:DEC-AD PT: (if-op-attr 'userPrincipalName' available) = FALSE.
[04/03/12 11:21:52.632]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.632]:DEC-AD PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
[04/03/12 11:21:52.632]:DEC-AD PT: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:52.632]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.633]:DEC-AD PT: Evaluating selection criteria for rule 'Convert Login Allowed Time Map to logonHours form'.
[04/03/12 11:21:52.633]:DEC-AD PT: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:52.633]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.634]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
[04/03/12 11:21:52.634]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.634]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.634]:DEC-AD PT: Applying to status #2.
[04/03/12 11:21:52.635]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:52.635]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.635]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.635]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep sAMAccountName in sync with userPrincipalName'.
[04/03/12 11:21:52.636]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.636]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.636]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:52.637]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.637]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.637]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep userPrincipalName in sync with sAMAccountName'.
[04/03/12 11:21:52.637]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.638]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.638]:DEC-AD PT: Evaluating selection criteria for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
[04/03/12 11:21:52.638]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.639]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.639]:DEC-AD PT: Evaluating selection criteria for rule 'Strip add/modify of DirXML-ADContext'.
[04/03/12 11:21:52.639]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.639]:DEC-AD PT: (if-operation equal "modify") = FALSE.
[04/03/12 11:21:52.639]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.640]:DEC-AD PT: Evaluating selection criteria for rule 'Convert userPrincipalName to name@domain.com'.
[04/03/12 11:21:52.640]:DEC-AD PT: (if-op-attr 'userPrincipalName' available) = FALSE.
[04/03/12 11:21:52.640]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.641]:DEC-AD PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
[04/03/12 11:21:52.641]:DEC-AD PT: (if-op-attr 'streetAddress' available) = FALSE.
[04/03/12 11:21:52.641]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.641]:DEC-AD PT: Evaluating selection criteria for rule 'Convert Login Allowed Time Map to logonHours form'.
[04/03/12 11:21:52.642]:DEC-AD PT: (if-op-attr 'logonHours' available) = FALSE.
[04/03/12 11:21:52.642]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.642]:DEC-AD PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
[04/03/12 11:21:52.643]:DEC-AD PT: (if-operation equal "add") = FALSE.
[04/03/12 11:21:52.643]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.643]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.644]:DEC-AD PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039) Element <parent> does not have a valid association.<application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
<status event-id="DEC-AD##13678cc3947##1" level="success"><application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/03/12 11:21:52.646]:DEC-AD PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
[04/03/12 11:21:52.646]:DEC-AD PT: Applying to status #1.
[04/03/12 11:21:52.647]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
[04/03/12 11:21:52.647]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.648]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.648]:DEC-AD PT: Applying to status #2.
[04/03/12 11:21:52.648]:DEC-AD PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
[04/03/12 11:21:52.649]:DEC-AD PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
[04/03/12 11:21:52.649]:DEC-AD PT: Rule rejected.
[04/03/12 11:21:52.649]:DEC-AD PT:Policy returned:
[04/03/12 11:21:52.649]:DEC-AD PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039) Element <parent> does not have a valid association.<application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
<status event-id="DEC-AD##13678cc3947##1" level="success"><application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/03/12 11:21:52.652]:DEC-AD PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039) Element <parent> does not have a valid association.<application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
<status event-id="DEC-AD##13678cc3947##1" level="success"><application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/03/12 11:21:52.656]:DEC-AD PT:Remote Interface Driver: Sending...
[04/03/12 11:21:52.656]:DEC-AD PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039) Element <parent> does not have a valid association.<application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
<status event-id="DEC-AD##13678cc3947##1" level="success"><application>DirXML</application>
<module>DEC-AD</module>
<object-dn>CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for Kevin rename3)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/03/12 11:21:52.659]:DEC-AD PT:Remote Interface Driver: Document sent.

--------------------


--
The opinions expressed are my own.
Check out my OES2 Guides:
Installing OES2 SP2:
http://www.novell.com/communities/node/11600/oes2-sp2-installation-guide
Upgrading to OES2 with ID Transfer:
http://www.novell.com/communities/node/11601/oes2-sp2-migration-guide-transfer-id-scenarios
GroupWise Migration with OES2 ID Transfer:
http://www.novell.com/communities/node/11602/groupwise-migration-netware-oes2-sp2-transfer-id
------------------------------------------------------------------------
kjhurni's Profile: http://forums.novell.com/member.php?userid=734
View this thread: http://forums.novell.com/showthread.php?t=454249

0 Likes
Highlighted
jwilleke Super Contributor.
Super Contributor.

Re: AD Group Rename handling in subscriber channel

You should be able to catch the re-name event and change the samAccountName.
I have never seen any reason to maintain the DirXML-ADAliasName. Have
no idea what it could be used for.

We often use the CN or the UniqueID value as the samAccountNAme and
also for the userPrincipalName before the @ sign.


On 2012-04-03 15:46:06 +0000, kjhurni said:

> I hope I scrubbed this sufficiently:
>
>
> Code:
> --------------------
>
> [04/03/12 11:21:17.726]:DEC-AD ST:Start transaction.
> [04/03/12 11:21:17.737]:DEC-AD ST:Processing events for transaction.
> [04/03/12 11:21:17.739]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.761]:DEC-AD ST:Applying event transformation policies.
> [04/03/12 11:21:17.761]:DEC-AD ST:Applying policy: %+C%14CEvent Transform%-C.
> [04/03/12 11:21:17.762]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.762]:DEC-AD ST: Evaluating selection criteria
> for rule 'Rename: User - set up variables'.
> [04/03/12 11:21:17.763]:DEC-AD ST: (if-operation equal "rename") = TRUE.
> [04/03/12 11:21:17.764]:DEC-AD ST: (if-class-name equal "User") = FALSE.
> [04/03/12 11:21:17.764]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.765]:DEC-AD ST: Evaluating selection criteria
> for rule 'Rename: User - set dest CN to new name'.
> [04/03/12 11:21:17.766]:DEC-AD ST: (if-local-variable 'new-name'
> available) = FALSE.
> [04/03/12 11:21:17.767]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.767]:DEC-AD ST: Evaluating selection criteria
> for rule 'Rename: User - if alias is not empty, remove values'.
> [04/03/12 11:21:17.768]:DEC-AD ST: (if-local-variable
> 'curr-alias' available) = FALSE.
> [04/03/12 11:21:17.769]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.769]:DEC-AD ST: Evaluating selection criteria
> for rule 'Modify: User, Full Name changing and empty - rename from
> src-dn'.
> [04/03/12 11:21:17.769]:DEC-AD ST: (if-op-attr 'Full Name'
> available) = FALSE.
> [04/03/12 11:21:17.770]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.770]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.771]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.775]:DEC-AD ST:Subscriber processing rename for
> \VAULT\ABC\Groups\Citrix\Group for Kevin rename3.
> [04/03/12 11:21:17.776]:DEC-AD ST:Applying command transformation policies.
> [04/03/12 11:21:17.776]:DEC-AD ST:Applying policy: %+C%14CChange eDir
> ou to AD department field%-C.
> [04/03/12 11:21:17.776]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.777]:DEC-AD ST: Evaluating selection criteria
> for rule 'Change edir ou to AD department field'.
> [04/03/12 11:21:17.777]:DEC-AD ST: (if-class-name equal "User") = FALSE.
> [04/03/12 11:21:17.777]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.777]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.778]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.781]:DEC-AD ST:Applying policy: %+C%14CCommand
> Transform%-C.
> [04/03/12 11:21:17.781]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.781]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add: User - change dest-dn to eDir CN'.
> [04/03/12 11:21:17.782]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.782]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.782]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.782]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.785]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Sub)-Transform Distribution Password%-C.
> [04/03/12 11:21:17.786]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.786]:DEC-AD ST: Evaluating selection criteria
> for rule 'Convert adds of the nspmDistributionPassword attribute to
> password elements'.
> [04/03/12 11:21:17.787]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.787]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.787]:DEC-AD ST: Evaluating selection criteria
> for rule 'Block modifies for failed password publish operations if
> reset password is false'.
> [04/03/12 11:21:17.788]:DEC-AD ST: (if-global-variable
> 'reset-external-password-on-failure' equal "false") = TRUE.
> [04/03/12 11:21:17.788]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.788]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.788]:DEC-AD ST: Evaluating selection criteria
> for rule 'Convert modifies of a nspmDistributionPassword attribute to a
> modify password operation'.
> [04/03/12 11:21:17.789]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.789]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.789]:DEC-AD ST: Evaluating selection criteria
> for rule 'Block empty modify operations'.
> [04/03/12 11:21:17.789]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.790]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.790]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.790]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.793]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Sub)-Default Password Policy%-C.
> [04/03/12 11:21:17.793]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.793]:DEC-AD ST: Evaluating selection criteria
> for rule 'On User add, provide default password of Surname if no
> password exists'.
> [04/03/12 11:21:17.793]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.794]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.794]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.794]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.796]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Sub)-Check Password GCV%-C.
> [04/03/12 11:21:17.797]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.797]:DEC-AD ST: Evaluating selection criteria
> for rule 'Block subscribing to passwords when objects are added'.
> [04/03/12 11:21:17.797]:DEC-AD ST: (if-global-variable
> 'enable-password-subscribe' equal "false") = FALSE.
> [04/03/12 11:21:17.798]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.798]:DEC-AD ST: Evaluating selection criteria
> for rule 'Block subscribing to password modifications'.
> [04/03/12 11:21:17.798]:DEC-AD ST: (if-global-variable
> 'enable-password-subscribe' equal "false") = FALSE.
> [04/03/12 11:21:17.799]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.799]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.799]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.801]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Sub)-Add Password Payload%-C.
> [04/03/12 11:21:17.802]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.802]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add operation-data element to password operations'.
> [04/03/12 11:21:17.802]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.802]:DEC-AD ST: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:17.803]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.803]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add payload data to a reset password from a failed password
> publish operation'.
> [04/03/12 11:21:17.803]:DEC-AD ST: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:17.803]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.804]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add payload data to password operations'.
> [04/03/12 11:21:17.804]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.804]:DEC-AD ST: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:17.804]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.805]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.805]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="Group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.808]:DEC-AD ST:Filtering out notification-only attributes.
> [04/03/12 11:21:17.808]:DEC-AD ST:Fixing up association references.
> [04/03/12 11:21:17.808]:DEC-AD ST:Applying schema mapping policies to output.
> [04/03/12 11:21:17.808]:DEC-AD ST:Applying policy: %+C%14CSchemaMapping%-C.
> [04/03/12 11:21:17.809]:DEC-AD ST: Mapping class-name 'Group' to 'group'.
> [04/03/12 11:21:17.809]:DEC-AD ST:Applying output transformation policies.
> [04/03/12 11:21:17.809]:DEC-AD ST:Applying policy: %+C%14COutput
> Transform%-C.
> [04/03/12 11:21:17.810]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.810]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:17.810]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.811]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.811]:DEC-AD ST: Evaluating selection criteria
> for rule 'Modify: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:17.811]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.812]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.812]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:17.813]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.813]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.813]:DEC-AD ST: Evaluating selection criteria
> for rule 'Modify: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:17.814]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.814]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.814]:DEC-AD ST: Evaluating selection criteria
> for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
> [04/03/12 11:21:17.815]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.815]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.815]:DEC-AD ST: Evaluating selection criteria
> for rule 'Strip add/modify of DirXML-ADContext'.
> [04/03/12 11:21:17.816]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.816]:DEC-AD ST: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:17.816]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.817]:DEC-AD ST: Evaluating selection criteria
> for rule 'Convert userPrincipalName to name@domain.com'.
> [04/03/12 11:21:17.817]:DEC-AD ST: (if-op-attr
> 'userPrincipalName' available) = FALSE.
> [04/03/12 11:21:17.818]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.818]:DEC-AD ST: Evaluating selection criteria
> for rule 'Street Address: Convert LF to CR-LF'.
> [04/03/12 11:21:17.818]:DEC-AD ST: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:17.818]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.819]:DEC-AD ST: Evaluating selection criteria
> for rule 'Convert Login Allowed Time Map to logonHours form'.
> [04/03/12 11:21:17.819]:DEC-AD ST: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:17.819]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.819]:DEC-AD ST: Evaluating selection criteria
> for rule 'Add: User - convert multi-valued Telephone to single value'.
> [04/03/12 11:21:17.820]:DEC-AD ST: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:17.820]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.820]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.820]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.823]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Sub)-Pub Email Notifications%-C.
> [04/03/12 11:21:17.824]:DEC-AD ST: Applying to rename #1.
> [04/03/12 11:21:17.824]:DEC-AD ST: Evaluating selection criteria
> for rule 'Send e-mail for a failed publish password operation'.
> [04/03/12 11:21:17.824]:DEC-AD ST: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:17.825]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.825]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.826]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.829]:DEC-AD ST:Submitting document to subscriber shim:
> [04/03/12 11:21:17.829]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.832]:DEC-AD ST:Remote Interface Driver: Sending...
> [04/03/12 11:21:17.832]:DEC-AD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename cached-time="20120403152117.619Z" class-name="group"
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> old-src-dn="\VAULT\ABC\Groups\Citrix\Group for Kevin rename2"
> qualified-old-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename2" qualified-src-dn="O=DEC\OU=Groups\OU=Citrix\CN=Group for Kevin
> rename3" remove-old-name="true" src-dn="\VAULT\ABC\Groups\Citrix\Group
> for Kevin rename3" src-entry-id="42028" timestamp="1332344962#1">
> <association
> state="associated">1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:17.835]:DEC-AD ST:Remote Interface Driver: Document sent.
> [04/03/12 11:21:17.863]:DEC-AD :Remote Interface Driver: Received.
> [04/03/12 11:21:17.863]:DEC-AD :
> <nds dtdversion="1.1" ndsversion="8.7">
> <source>
> <product asn1id="" build="20110211_120000"
> instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD"
> version="3.5.14">AD</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> level="success"/>
> </output>
> </nds>
> [04/03/12 11:21:17.864]:DEC-AD :Remote Interface Driver: Received
> document for subscriber channel
> [04/03/12 11:21:17.865]:DEC-AD ST:SubscriptionShim.execute() returned:
> [04/03/12 11:21:17.865]:DEC-AD ST:
> <nds dtdversion="1.1" ndsversion="8.7">
> <source>
> <product asn1id="" build="20110211_120000"
> instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD"
> version="3.5.14">AD</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> level="success"/>
> </output>
> </nds>
> [04/03/12 11:21:17.866]:DEC-AD ST:Applying input transformation policies.
> [04/03/12 11:21:17.866]:DEC-AD ST:Applying policy: %+C%14CInput Transform%-C.
> [04/03/12 11:21:17.867]:DEC-AD ST: Applying to status #1.
> [04/03/12 11:21:17.867]:DEC-AD ST: Evaluating selection criteria
> for rule 'Street Address: Convert CR-LF to LF'.
> [04/03/12 11:21:17.867]:DEC-AD ST: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:17.868]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.868]:DEC-AD ST: Evaluating selection criteria
> for rule 'Convert logonHours to Login Allowed Time Map form'.
> [04/03/12 11:21:17.868]:DEC-AD ST: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:17.868]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.868]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.869]:DEC-AD ST:
> <nds dtdversion="1.1" ndsversion="8.7">
> <source>
> <product asn1id="" build="20110211_120000"
> instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD"
> version="3.5.14">AD</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> level="success"/>
> </output>
> </nds>
> [04/03/12 11:21:17.870]:DEC-AD ST:Applying XSLT policy:
> %+C%14CInput+Transform+SS%-C.
> [04/03/12 11:21:17.873]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.873]:DEC-AD ST:
> <nds dtdversion="1.1" ndsversion="8.7">
> <source>
> <product asn1id="" build="20110211_120000"
> instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD"
> version="3.5.14">AD</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> level="success"/>
> </output>
> </nds>
> [04/03/12 11:21:17.874]:DEC-AD ST:Applying policy:
> %+C%14CPassword(Pub)-Sub Email Notifications%-C.
> [04/03/12 11:21:17.874]:DEC-AD ST: Applying to status #1.
> [04/03/12 11:21:17.875]:DEC-AD ST: Evaluating selection criteria
> for rule 'Send e-mail on a failure when subscribing to passwords'.
> [04/03/12 11:21:17.875]:DEC-AD ST: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:17.876]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.876]:DEC-AD ST: Evaluating selection criteria
> for rule 'Send e-mail on failure to reset connected system password
> using the DirXML data store password'.
> [04/03/12 11:21:17.876]:DEC-AD ST: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:17.877]:DEC-AD ST: Rule rejected.
> [04/03/12 11:21:17.877]:DEC-AD ST:Policy returned:
> [04/03/12 11:21:17.877]:DEC-AD ST:
> <nds dtdversion="1.1" ndsversion="8.7">
> <source>
> <product asn1id="" build="20110211_120000"
> instance="\VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD"
> version="3.5.14">AD</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status
> event-id="CO-NW-DIS02#20120403152117#4#2:ec6772c3-a11e-4295-b591-c37267ec1ea1"
> level="success"/>
> </output>
> </nds>
> [04/03/12 11:21:17.878]:DEC-AD ST:Applying schema mapping policies to input.
> [04/03/12 11:21:17.878]:DEC-AD ST:Applying policy: %+C%14CSchemaMapping%-C.
> [04/03/12 11:21:17.879]:DEC-AD ST:Resolving association references.
> [04/03/12 11:21:17.879]:DEC-AD ST:Processing returned document.
> [04/03/12 11:21:17.882]:DEC-AD ST:Processing operation <status> for .
> [04/03/12 11:21:17.885]:DEC-AD :Remote Interface Driver: Waiting for
> receive...
> [04/03/12 11:21:17.895]:DEC-AD ST:
> DirXML Log Event -------------------
> Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
> Channel: Subscriber
> Object: \VAULT\ABC\Groups\Citrix\Group for Kevin rename3
> Status: Success
> [04/03/12 11:21:17.896]:DEC-AD ST:End transaction.
> [04/03/12 11:21:52.472]:DEC-AD :Remote Interface Driver: Received.
> [04/03/12 11:21:52.472]:DEC-AD :
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.475]:DEC-AD :Remote Interface Driver: Received
> document for publisher channel
> [04/03/12 11:21:52.475]:DEC-AD :Remote Interface Driver: Waiting for
> receive...
> [04/03/12 11:21:52.477]:DEC-AD PT:Receiving DOM document from application.
> [04/03/12 11:21:52.477]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.480]:DEC-AD PT:Applying input transformation policies.
> [04/03/12 11:21:52.480]:DEC-AD PT:Applying policy: %+C%14CInput Transform%-C.
> [04/03/12 11:21:52.480]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.481]:DEC-AD PT: Evaluating selection criteria
> for rule 'Street Address: Convert CR-LF to LF'.
> [04/03/12 11:21:52.481]:DEC-AD PT: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:52.481]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.481]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert logonHours to Login Allowed Time Map form'.
> [04/03/12 11:21:52.482]:DEC-AD PT: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:52.482]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.482]:DEC-AD PT: Applying to rename #2.
> [04/03/12 11:21:52.482]:DEC-AD PT: Evaluating selection criteria
> for rule 'Street Address: Convert CR-LF to LF'.
> [04/03/12 11:21:52.483]:DEC-AD PT: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:52.483]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.483]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert logonHours to Login Allowed Time Map form'.
> [04/03/12 11:21:52.484]:DEC-AD PT: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:52.484]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.484]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.484]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.487]:DEC-AD PT:Applying XSLT policy:
> %+C%14CInput+Transform+SS%-C.
> [04/03/12 11:21:52.488]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.488]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.491]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Sub Email Notifications%-C.
> [04/03/12 11:21:52.491]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.491]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail on a failure when subscribing to passwords'.
> [04/03/12 11:21:52.492]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.492]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.492]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail on failure to reset connected system password
> using the DirXML data store password'.
> [04/03/12 11:21:52.493]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.493]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.493]:DEC-AD PT: Applying to rename #2.
> [04/03/12 11:21:52.494]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail on a failure when subscribing to passwords'.
> [04/03/12 11:21:52.494]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.495]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.495]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail on failure to reset connected system password
> using the DirXML data store password'.
> [04/03/12 11:21:52.495]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.496]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.496]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.496]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.501]:DEC-AD PT:Applying schema mapping policies to input.
> [04/03/12 11:21:52.502]:DEC-AD PT:Applying policy: %+C%14CSchemaMapping%-C.
> [04/03/12 11:21:52.502]:DEC-AD PT: Mapping class-name 'group' to 'Group'.
> [04/03/12 11:21:52.502]:DEC-AD PT: Mapping class-name 'group' to 'Group'.
> [04/03/12 11:21:52.503]:DEC-AD PT:Resolving association references.
> [04/03/12 11:21:52.503]:DEC-AD PT:Applying event transformation policies.
> [04/03/12 11:21:52.503]:DEC-AD PT:Applying policy: %+C%14CEvent Transform%-C.
> [04/03/12 11:21:52.503]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.503]:DEC-AD PT: Evaluating selection criteria
> for rule 'Veto User Moves'.
> [04/03/12 11:21:52.504]:DEC-AD PT: (if-operation equal "move") = TRUE.
> [04/03/12 11:21:52.504]:DEC-AD PT: (if-class-name equal "User") = FALSE.
> [04/03/12 11:21:52.504]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.504]:DEC-AD PT: Applying to rename #2.
> [04/03/12 11:21:52.505]:DEC-AD PT: Evaluating selection criteria
> for rule 'Veto User Moves'.
> [04/03/12 11:21:52.505]:DEC-AD PT: (if-operation equal "move") = FALSE.
> [04/03/12 11:21:52.505]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.505]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.506]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> <rename class-name="Group" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.510]:DEC-AD PT:Applying publisher filter.
> [04/03/12 11:21:52.510]:DEC-AD PT:Publisher processing move for
> CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com.
> [04/03/12 11:21:52.510]:DEC-AD PT:Applying command transformation policies.
> [04/03/12 11:21:52.510]:DEC-AD PT:Applying policy: %+C%14CCommand
> Transform%-C.
> [04/03/12 11:21:52.511]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.511]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: specify aux class and context'.
> [04/03/12 11:21:52.511]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.511]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.512]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: If User, rebuild dest-dn & strip CN, DirXML-ADAliasName
> attrs'.
> [04/03/12 11:21:52.512]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.512]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.512]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: If User, check local variables and set attrs as needed'.
> [04/03/12 11:21:52.513]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.513]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.513]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: Set DirXML-ADContext value'.
> [04/03/12 11:21:52.513]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.514]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.514]:DEC-AD PT: Evaluating selection criteria
> for rule 'Set Equivalent To Me'.
> [04/03/12 11:21:52.514]:DEC-AD PT: (if-op-attr 'Member'
> available) = FALSE.
> [04/03/12 11:21:52.514]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.514]:DEC-AD PT: Evaluating selection criteria
> for rule 'Remove Equivalent To Me'.
> [04/03/12 11:21:52.515]:DEC-AD PT: (if-op-attr 'Member'
> changing-from ".+") = FALSE.
> [04/03/12 11:21:52.515]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.515]:DEC-AD PT: Evaluating selection criteria
> for rule 'Delete: Convert to Disable'.
> [04/03/12 11:21:52.516]:DEC-AD PT: (if-operation equal "delete")
> = FALSE.
> [04/03/12 11:21:52.516]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.516]:DEC-AD PT: Evaluating selection criteria
> for rule 'Veto Moves'.
> [04/03/12 11:21:52.516]:DEC-AD PT: (if-operation equal "move") = TRUE.
> [04/03/12 11:21:52.516]:DEC-AD PT: (if-class-name equal "User") = FALSE.
> [04/03/12 11:21:52.517]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.517]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.517]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.519]:DEC-AD PT:Applying XSLT policy:
> %+C%14CCommand+Transform+SS%-C.
> [04/03/12 11:21:52.520]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.520]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.522]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Default Password Policy%-C.
> [04/03/12 11:21:52.522]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.522]:DEC-AD PT: Evaluating selection criteria
> for rule 'On User add, provide default password of Surname if no
> password exists'.
> [04/03/12 11:21:52.523]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.523]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.523]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.523]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.525]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Check Password GCV%-C.
> [04/03/12 11:21:52.525]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.525]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block publishing passwords to DirXML data store when adding a
> object'.
> [04/03/12 11:21:52.526]:DEC-AD PT: (if-global-variable
> 'enable-password-publish' equal "false") = TRUE.
> [04/03/12 11:21:52.526]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.526]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.526]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block sending modify-password changes to the DirXML data
> store'.
> [04/03/12 11:21:52.527]:DEC-AD PT: (if-global-variable
> 'enable-password-publish' equal "false") = TRUE.
> [04/03/12 11:21:52.527]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.527]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.527]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.528]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.529]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Publish Distribution Password%-C.
> [04/03/12 11:21:52.530]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.530]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add nspmDistributionAttribute attribute to add operation'.
> [04/03/12 11:21:52.530]:DEC-AD PT: (if-global-variable
> 'publish-password-to-dp' equal "true") = TRUE.
> [04/03/12 11:21:52.531]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.531]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.531]:DEC-AD PT: Evaluating selection criteria
> for rule 'Change modify-password operations to a modify'.
> [04/03/12 11:21:52.531]:DEC-AD PT: (if-global-variable
> 'publish-password-to-dp' equal "true") = TRUE.
> [04/03/12 11:21:52.532]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.532]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.532]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.532]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.534]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Publish NDS Password%-C.
> [04/03/12 11:21:52.534]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.535]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block publishing passwords to NDS password'.
> [04/03/12 11:21:52.535]:DEC-AD PT: (if-global-variable
> 'publish-password-to-nds' equal "false") = TRUE.
> [04/03/12 11:21:52.535]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.535]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.536]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block sending modify-password changes to the NDS password'.
> [04/03/12 11:21:52.536]:DEC-AD PT: (if-global-variable
> 'publish-password-to-nds' equal "false") = TRUE.
> [04/03/12 11:21:52.536]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.537]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.537]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.537]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.539]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Add Password Payload%-C.
> [04/03/12 11:21:52.539]:DEC-AD PT: Applying to move #1.
> [04/03/12 11:21:52.539]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add operation-data element to password operations'.
> [04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.540]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.541]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.541]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add payload data to password operations'.
> [04/03/12 11:21:52.541]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.541]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.542]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.542]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.542]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.542]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.542]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <move class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##0"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <parent src-dn="OU=Citrix-Groups,DC=domain,DC=com">
> <association>67160b40e106eb43883399ff379ceed1</association>
> </parent>
> </move>
> </input>
> </nds>
> [04/03/12 11:21:52.544]:DEC-AD PT:Filtering out notification-only attributes.
> [04/03/12 11:21:52.544]:DEC-AD PT:Pumping XDS to eDirectory.
> [04/03/12 11:21:52.545]:DEC-AD PT:Performing operation move for
> DEC\Groups\Citrix\Group for Kevin rename3.
> [04/03/12 11:21:52.573]:DEC-AD PT:
> DirXML Log Event -------------------
> Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
> Channel: Publisher
> Object: CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)
> Status: Error
> Message: Code(-9039) Element <parent> does not have a valid association.
> [04/03/12 11:21:52.583]:DEC-AD PT:Applying publisher filter.
> [04/03/12 11:21:52.584]:DEC-AD PT:Publisher processing rename for
> CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com.
> [04/03/12 11:21:52.584]:DEC-AD PT:Applying command transformation policies.
> [04/03/12 11:21:52.585]:DEC-AD PT:Applying policy: %+C%14CCommand
> Transform%-C.
> [04/03/12 11:21:52.585]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.585]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: specify aux class and context'.
> [04/03/12 11:21:52.586]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.586]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.586]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: If User, rebuild dest-dn & strip CN, DirXML-ADAliasName
> attrs'.
> [04/03/12 11:21:52.586]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.587]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.587]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: If User, check local variables and set attrs as needed'.
> [04/03/12 11:21:52.587]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.587]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.588]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: Set DirXML-ADContext value'.
> [04/03/12 11:21:52.588]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.589]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.589]:DEC-AD PT: Evaluating selection criteria
> for rule 'Set Equivalent To Me'.
> [04/03/12 11:21:52.589]:DEC-AD PT: (if-op-attr 'Member'
> available) = FALSE.
> [04/03/12 11:21:52.589]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.589]:DEC-AD PT: Evaluating selection criteria
> for rule 'Remove Equivalent To Me'.
> [04/03/12 11:21:52.590]:DEC-AD PT: (if-op-attr 'Member'
> changing-from ".+") = FALSE.
> [04/03/12 11:21:52.590]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.590]:DEC-AD PT: Evaluating selection criteria
> for rule 'Delete: Convert to Disable'.
> [04/03/12 11:21:52.590]:DEC-AD PT: (if-operation equal "delete")
> = FALSE.
> [04/03/12 11:21:52.591]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.591]:DEC-AD PT: Evaluating selection criteria
> for rule 'Veto Moves'.
> [04/03/12 11:21:52.591]:DEC-AD PT: (if-operation equal "move") = FALSE.
> [04/03/12 11:21:52.591]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.592]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.592]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.593]:DEC-AD PT:Applying XSLT policy:
> %+C%14CCommand+Transform+SS%-C.
> [04/03/12 11:21:52.594]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.595]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.596]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Default Password Policy%-C.
> [04/03/12 11:21:52.597]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.597]:DEC-AD PT: Evaluating selection criteria
> for rule 'On User add, provide default password of Surname if no
> password exists'.
> [04/03/12 11:21:52.598]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.598]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.598]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.598]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.600]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Check Password GCV%-C.
> [04/03/12 11:21:52.600]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.600]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block publishing passwords to DirXML data store when adding a
> object'.
> [04/03/12 11:21:52.601]:DEC-AD PT: (if-global-variable
> 'enable-password-publish' equal "false") = TRUE.
> [04/03/12 11:21:52.601]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.602]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.602]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block sending modify-password changes to the DirXML data
> store'.
> [04/03/12 11:21:52.602]:DEC-AD PT: (if-global-variable
> 'enable-password-publish' equal "false") = TRUE.
> [04/03/12 11:21:52.602]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.603]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.603]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.603]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.605]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Publish Distribution Password%-C.
> [04/03/12 11:21:52.605]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.605]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add nspmDistributionAttribute attribute to add operation'.
> [04/03/12 11:21:52.606]:DEC-AD PT: (if-global-variable
> 'publish-password-to-dp' equal "true") = TRUE.
> [04/03/12 11:21:52.606]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.606]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.607]:DEC-AD PT: Evaluating selection criteria
> for rule 'Change modify-password operations to a modify'.
> [04/03/12 11:21:52.607]:DEC-AD PT: (if-global-variable
> 'publish-password-to-dp' equal "true") = TRUE.
> [04/03/12 11:21:52.607]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.607]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.608]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.608]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.609]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Publish NDS Password%-C.
> [04/03/12 11:21:52.610]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.610]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block publishing passwords to NDS password'.
> [04/03/12 11:21:52.610]:DEC-AD PT: (if-global-variable
> 'publish-password-to-nds' equal "false") = TRUE.
> [04/03/12 11:21:52.611]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.611]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.611]:DEC-AD PT: Evaluating selection criteria
> for rule 'Block sending modify-password changes to the NDS password'.
> [04/03/12 11:21:52.612]:DEC-AD PT: (if-global-variable
> 'publish-password-to-nds' equal "false") = TRUE.
> [04/03/12 11:21:52.612]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.613]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.613]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.613]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.615]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Pub)-Add Password Payload%-C.
> [04/03/12 11:21:52.615]:DEC-AD PT: Applying to rename #1.
> [04/03/12 11:21:52.615]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add operation-data element to password operations'.
> [04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.616]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.617]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.617]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add payload data to password operations'.
> [04/03/12 11:21:52.617]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.617]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.618]:DEC-AD PT: (if-operation equal
> "modify-password") = FALSE.
> [04/03/12 11:21:52.618]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.618]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.619]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.619]:DEC-AD PT:
> <nds dtdversion="2.2">
> <source>
> <product version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <rename class-name="Group" dest-dn="DEC\Groups\Citrix\Group for Kevin
> rename3" dest-entry-id="42028" event-id="DEC-AD##13678cc3947##1"
> src-dn="CN=Group for Kevin rename3,OU=Citrix-Groups,DC=domain,DC=com">
> <association>1d0997354af458439b48dae239a6db35</association>
> <new-name>Group for Kevin rename3</new-name>
> </rename>
> </input>
> </nds>
> [04/03/12 11:21:52.621]:DEC-AD PT:Filtering out notification-only attributes.
> [04/03/12 11:21:52.621]:DEC-AD PT:Pumping XDS to eDirectory.
> [04/03/12 11:21:52.621]:DEC-AD PT:Performing operation rename for
> DEC\Groups\Citrix\Group for Kevin rename3.
> [04/03/12 11:21:52.622]:DEC-AD PT:Rename not needed.
> [04/03/12 11:21:52.623]:DEC-AD PT:
> DirXML Log Event -------------------
> Driver: \VAULT\ABC\IDM-Drivers\IDM-Drivers\DEC-AD
> Channel: Publisher
> Object: CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)
> Status: Success
> [04/03/12 11:21:52.624]:DEC-AD PT:Fixing up association references.
> [04/03/12 11:21:52.624]:DEC-AD PT:Applying schema mapping policies to output.
> [04/03/12 11:21:52.624]:DEC-AD PT:Applying policy: %+C%14CSchemaMapping%-C.
> [04/03/12 11:21:52.625]:DEC-AD PT:Applying output transformation policies.
> [04/03/12 11:21:52.625]:DEC-AD PT:Applying policy: %+C%14COutput
> Transform%-C.
> [04/03/12 11:21:52.625]:DEC-AD PT: Applying to status #1.
> [04/03/12 11:21:52.625]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:52.626]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.626]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.626]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:52.627]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.627]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.627]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:52.628]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.628]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.628]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:52.629]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.629]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.629]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
> [04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.630]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.630]:DEC-AD PT: Evaluating selection criteria
> for rule 'Strip add/modify of DirXML-ADContext'.
> [04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.630]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.631]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.631]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert userPrincipalName to name@domain.com'.
> [04/03/12 11:21:52.631]:DEC-AD PT: (if-op-attr
> 'userPrincipalName' available) = FALSE.
> [04/03/12 11:21:52.632]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.632]:DEC-AD PT: Evaluating selection criteria
> for rule 'Street Address: Convert LF to CR-LF'.
> [04/03/12 11:21:52.632]:DEC-AD PT: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:52.632]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.633]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert Login Allowed Time Map to logonHours form'.
> [04/03/12 11:21:52.633]:DEC-AD PT: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:52.633]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.634]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User - convert multi-valued Telephone to single value'.
> [04/03/12 11:21:52.634]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.634]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.634]:DEC-AD PT: Applying to status #2.
> [04/03/12 11:21:52.635]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:52.635]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.635]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.635]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep sAMAccountName in sync with
> userPrincipalName'.
> [04/03/12 11:21:52.636]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.636]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.636]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:52.637]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.637]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.637]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep userPrincipalName in sync with
> sAMAccountName'.
> [04/03/12 11:21:52.637]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.638]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.638]:DEC-AD PT: Evaluating selection criteria
> for rule 'Modify: User, keep displayName in sync with sAMAccountName'.
> [04/03/12 11:21:52.638]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.639]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.639]:DEC-AD PT: Evaluating selection criteria
> for rule 'Strip add/modify of DirXML-ADContext'.
> [04/03/12 11:21:52.639]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.639]:DEC-AD PT: (if-operation equal "modify")
> = FALSE.
> [04/03/12 11:21:52.639]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.640]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert userPrincipalName to name@domain.com'.
> [04/03/12 11:21:52.640]:DEC-AD PT: (if-op-attr
> 'userPrincipalName' available) = FALSE.
> [04/03/12 11:21:52.640]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.641]:DEC-AD PT: Evaluating selection criteria
> for rule 'Street Address: Convert LF to CR-LF'.
> [04/03/12 11:21:52.641]:DEC-AD PT: (if-op-attr 'streetAddress'
> available) = FALSE.
> [04/03/12 11:21:52.641]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.641]:DEC-AD PT: Evaluating selection criteria
> for rule 'Convert Login Allowed Time Map to logonHours form'.
> [04/03/12 11:21:52.642]:DEC-AD PT: (if-op-attr 'logonHours'
> available) = FALSE.
> [04/03/12 11:21:52.642]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.642]:DEC-AD PT: Evaluating selection criteria
> for rule 'Add: User - convert multi-valued Telephone to single value'.
> [04/03/12 11:21:52.643]:DEC-AD PT: (if-operation equal "add") = FALSE.
> [04/03/12 11:21:52.643]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.643]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.644]:DEC-AD PT:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039)
> Element <parent> does not have a valid
> association.<application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> <status event-id="DEC-AD##13678cc3947##1"
> level="success"><application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> </output>
> </nds>
> [04/03/12 11:21:52.646]:DEC-AD PT:Applying policy:
> %+C%14CPassword(Sub)-Pub Email Notifications%-C.
> [04/03/12 11:21:52.646]:DEC-AD PT: Applying to status #1.
> [04/03/12 11:21:52.647]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail for a failed publish password operation'.
> [04/03/12 11:21:52.647]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.648]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.648]:DEC-AD PT: Applying to status #2.
> [04/03/12 11:21:52.648]:DEC-AD PT: Evaluating selection criteria
> for rule 'Send e-mail for a failed publish password operation'.
> [04/03/12 11:21:52.649]:DEC-AD PT: (if-global-variable
> 'notify-user-on-password-dist-failure' equal "true") = FALSE.
> [04/03/12 11:21:52.649]:DEC-AD PT: Rule rejected.
> [04/03/12 11:21:52.649]:DEC-AD PT:Policy returned:
> [04/03/12 11:21:52.649]:DEC-AD PT:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039)
> Element <parent> does not have a valid
> association.<application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> <status event-id="DEC-AD##13678cc3947##1"
> level="success"><application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> </output>
> </nds>
> [04/03/12 11:21:52.652]:DEC-AD PT:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039)
> Element <parent> does not have a valid
> association.<application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> <status event-id="DEC-AD##13678cc3947##1"
> level="success"><application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> </output>
> </nds>
> [04/03/12 11:21:52.656]:DEC-AD PT:Remote Interface Driver: Sending...
> [04/03/12 11:21:52.656]:DEC-AD PT:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <output>
> <status event-id="DEC-AD##13678cc3947##0" level="error">Code(-9039)
> Element <parent> does not have a valid
> association.<application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> <status event-id="DEC-AD##13678cc3947##1"
> level="success"><application>DirXML</application>
> <module>DEC-AD</module>
> <object-dn>CN=Group for Kevin
> rename3,OU=Citrix-Groups,DC=domain,DC=com (DEC\Groups\Citrix\Group for
> Kevin rename3)</object-dn>
> <component>Publisher</component>
> </status>
> </output>
> </nds>
> [04/03/12 11:21:52.659]:DEC-AD PT:Remote Interface Driver: Document sent.
>
> --------------------



--

Thank You for your help!

-jim
Jim Willeke

0 Likes
Knowledge Partner
Knowledge Partner

Re: AD Group Rename handling in subscriber channel


jwilleke;2187321 Wrote:
> You should be able to catch the re-name event and change the
> samAccountName.
> I have never seen any reason to maintain the DirXML-ADAliasName. Have
> no idea what it could be used for.
>
> We often use the CN or the UniqueID value as the samAccountNAme and
> also for the userPrincipalName before the @ sign.
>
>
> On 2012-04-03 15:46:06 +0000, kjhurni said:
>
> > I hope I scrubbed this sufficiently:
> >
> >
> > Code:
> > --------------------
> >

>
> > --------------------

>
>
> --
>
> Thank You for your help!
>
> -jim
> Jim Willeke


Well orginally I'd tried "cn" to samAccountName and it messes things up
(it puts in random characters instead of the name). Plus our CN are
longer than the 14 or whatever character limit of samAccountName.

My understanding is that the dirxmlalias thingy is put in the new
policy that fixes this. Sure enough, I plopped it in and set it up the
way the default driver is and it works.


--
The opinions expressed are my own.
Check out my OES2 Guides:
Installing OES2 SP2:
http://www.novell.com/communities/node/11600/oes2-sp2-installation-guide
Upgrading to OES2 with ID Transfer:
http://www.novell.com/communities/node/11601/oes2-sp2-migration-guide-transfer-id-scenarios
GroupWise Migration with OES2 ID Transfer:
http://www.novell.com/communities/node/11602/groupwise-migration-netware-oes2-sp2-transfer-id
------------------------------------------------------------------------
kjhurni's Profile: http://forums.novell.com/member.php?userid=734
View this thread: http://forums.novell.com/showthread.php?t=454249

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.