Change to how nrfGroupRoles is populated

[joelburke]

We recently upgraded the IDM Engine, UA, and RRSD to 4.8.3. 

I'm not sure which version this started on, but I just noticed nrfGroupRoles is populated differently.

Old

<assignment>
	<start_tm>20210330221352Z</start_tm>
	<cause>
		<group>cn=GroupA,ou=Groups,ou=Data,o=Test</group>
		<group>cn=GroupB,ou=Groups,ou=Data,o=Test</group>
	</cause>
</assignment>

New

<assignment>
	<start_tm>20210330221352Z</start_tm>
	<cause>
		<group>cn=GroupA,ou=Groups,ou=Data,o=Test
			<req>cn=ua,ou=ServiceAccount,ou=Data,o=Test</req>
			<req_desc>a</req_desc>
		</group>
		<group>cn=GroupB,ou=Groups,ou=Data,o=Test
			<req>cn=ua,ou=ServiceAccount,ou=Data,o=Test</req>
			<req_desc>a</req_desc>
		</group>
	</cause>
</assignment>

Notice the req and req_desc? Is it possible to turn that off? It's having negative affects on PRDs that are not expecting the extra attribute.

[tami]

Hi,

I noticed the same about week ago.  I think the changes are done somewhere between these packages

netiq-DXMLrrsd-4.8.0-0.noarch -> netiq-DXMLrrsd-4.8.2-1.noarch

Had same effects on my PRD's. It would be nice the get heads-up before doing about these kind of changes, maybe document it 🙂

//t