Driver Data Question

[Driver_Girl]

I will admit it I have dirty data, this problem I have taken over and
given the task to fix it. What the "Dirt" is, the values in a several
attributes are different in eDirectory then they are in AD.

The trace below has me baffled. I have the attribute ngcOtherProgram
coming across but why does the driver NOT see it as coming through ? I
know this is probably simple but I really need a second set of eye
because I know I have to be missing SOMETHING.

03/20/12 14:14:43.569]:DRIVERX_AD ST:Subscriber processing modify for
\TREE\NGC\Vault\External\Users\G81XXXXX.
[03/20/12 14:14:43.569]:DRIVERX_AD ST:Applying command transformation
policies.
[03/20/12 14:14:43.569]:DRIVERX_AD ST:Applying policy:
%+C%14CCommand%-C.
[03/20/12 14:14:43.569]:DRIVERX_AD ST: Applying to modify #1.
[03/20/12 14:14:43.569]:DRIVERX_AD ST:Policy returned:
[03/20/12 14:14:43.569]:DRIVERX_AD ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.1">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20120320181443.505Z" class-name="User"
event-id="PK_ID=6000009881,table=EXT_PART_QUEUE_PROV,schema=CPAONB:26950dc5-8ef3-4f3e-bde9-f705318529ef"
qualified-src-dn="O=ORG\OU=Vault\OU=Ext\OU=People\CN=G81XXXXX"
src-dn="\TREE\ORG\Vault\Ext\People\G81XXXXX" src-entry-id="324736"
timestamp="1332267283#6">
<association
state="associated">cb25d2b948a0b04fba100dddbb25d5a3</association>
<modify-attr attr-name="ngcOtherProgram">
<remove-value>
<value timestamp="1332255548#5"
type="string">EBIP.PST.Mailbox@ngc.com</value>
</remove-value>
</modify-attr>
</modify>
</input>
</nds>
[03/20/12 14:14:43.571]:DRIVERX_AD ST:Applying policy: %+C%14CDomain
Specific Values%-C.
[03/20/12 14:14:43.571]:DRIVERX_AD ST: Applying to modify #1.
[03/20/12 14:14:43.571]:DRIVERX_AD ST: Evaluating selection criteria
for rule 'Select Attributes to be managed'.
[03/20/12 14:14:43.571]:DRIVERX_AD ST: (if-op-attr
'ngcOtherProgram' not-available) = TRUE.
[03/20/12 14:14:43.571]:DRIVERX_AD ST: (if-op-attr
'ngcPrimaryProgram' not-available) = TRUE.
[03/20/12 14:14:43.571]:DRIVERX_AD ST: (if-op-attr 'ngc-SM-Attr3'
not-available) = TRUE.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: (if-op-attr
'ngcAccountExpires' not-available) = TRUE.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: (if-op-attr
'managerWorkforceID' not-available) = TRUE.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: (if-op-attr 'ngcNotation'
not-available) = TRUE.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: (if-op-attr
'ngcuseraccountcontrol' not-available) = TRUE.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: Rule selected.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: Applying rule 'Select
Attributes to be managed'.
[03/20/12 14:14:43.572]:DRIVERX_AD ST: Action: do-break().
[03/20/12 14:14:43.572]:DRIVERX_AD ST:Policy returned:

Thanks,
Sheryl


--
Driver_Girl
------------------------------------------------------------------------
Driver_Girl's Profile: http://forums.novell.com/member.php?userid=30126
View this thread: http://forums.novell.com/showthread.php?t=453722

[Anonymous_User]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

That operation is removing the value. Testing for it to be there when
the current operation is removing it is kind of weird, and not-available
is true when the only availability if the removal. Maybe look for the
attribute to be 'changing' instead.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=gVgn
-----END PGP SIGNATURE-----

[Driver_Girl]

So what you are saying, if it's doing a remove it does not see it as
present because it's being removed ?


--
Driver_Girl
------------------------------------------------------------------------
Driver_Girl's Profile: http://forums.novell.com/member.php?userid=30126
View this thread: http://forums.novell.com/showthread.php?t=453722

[Anonymous_User]

On 3/21/2012 10:26 AM, Driver Girl wrote:
>
> So what you are saying, if it's doing a remove it does not see it as
> present because it's being removed ?
>
>
Correct.
If operation attr available will find a new value being added. If a value is only being removed
then you need to test for if op-attr changing.

If you want to test for a remove only and not an add, then you would test for if op-attr changing
and if op-attr not available. That would pick up remove only without an add.

[dgersic]

On Wed, 21 Mar 2012 15:34:51 +0000, Will Schneider wrote:

> If you want to test for a remove only and not an add, then you would
> test for if op-attr changing and if op-attr not available. That would
> pick up remove only without an add.

I tend to do this with something like:

if op-attr changing
AND
if op-attr not changing to regex .+



--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.novell.com

Please post questions in the forums. No support provided via email.

[geoffc]

On 3/21/2012 11:34 AM, Will Schneider wrote:
> On 3/21/2012 10:26 AM, Driver Girl wrote:
>>
>> So what you are saying, if it's doing a remove it does not see it as
>> present because it's being removed ?
>>
>>
> Correct.
> If operation attr available will find a new value being added. If a
> value is only being removed then you need to test for if op-attr changing.
>
> If you want to test for a remove only and not an add, then you would
> test for if op-attr changing and if op-attr not available. That would
> pick up remove only without an add.

Discussed in some detail here:

http://www.novell.com/communities/node/13144/various-attribute-tokens-idm-policy

[Driver_Girl]

Thanks Everyone for the help, these answers filled a void I was missing.


Time to get things cleaned up !!


--
Driver_Girl
------------------------------------------------------------------------
Driver_Girl's Profile: http://forums.novell.com/member.php?userid=30126
View this thread: http://forums.novell.com/showthread.php?t=453722