tirthankar1984 Trusted Contributor.
Trusted Contributor.
1206 views

Email not delivered from eDirectory system

Hi,
Our environment is configured with IDM 4.7 and customer have hosted zimbra mail server and only 587 port is opened for email delivery. From Linux console where the eDirectory and IDM is installed, mails are delivered successfully using "openssl s_client -connect lab.smart.city:587 -starttls smtp". Now the email server is configured in iManager, but from Null driver emails not delivered, showing the below error

Message: Code(-9195) Error in vnd.nds.stream://BSC_IDV_DEV/system/driverset1/BSC+Generic+Null/Email+Password+on+user+Enablement#XmlData:41 : Couldn't send email: com.novell.nds.dirxml.util.mail.HandlerException: javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied
;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied

Can anybody please suggest what is the configuration error? The email server certificate is also imported to the eDirectory system using the below command
keytool -importcert -alias zimbra -file Zimbra.cer -keystore /opt/novell/eDirectory/lib64/nds-modules/jre/lib/security/cacerts
Labels (1)
0 Likes
11 Replies
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

The exception looks like a client-side exception, and the text indicates
"Invalid Addresses". Please post the trace leading up to this so we can
see the target address intended to be the recipient of the e-mail to see
if it looks unusual.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

On 2018-11-26 10:34, tirthankar1984 wrote:
>
> Hi,
> Our environment is configured with IDM 4.7 and customer have hosted
> zimbra mail server and only 587 port is opened for email delivery. From
> Linux console where the eDirectory and IDM is installed, mails are
> delivered successfully using "openssl s_client -connect
> lab.smart.city:587 -starttls smtp". Now the email server is configured
> in iManager, but from Null driver emails not delivered, showing the
> below error
>
> Message: Code(-9195) Error in
> vnd.nds.stream://BSC_IDV_DEV/system/driverset1/BSC+Generic+Null/Email+Password+on+user+Enablement#XmlData:41
> : Couldn't send email: com.novell.nds.dirxml.util.mail.HandlerException:
> javax.mail.SendFailedException: Invalid Addresses;
> nested exception is:
> com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied
> ;
> nested exception is:
> com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied
>
> Can anybody please suggest what is the configuration error? The email
> server certificate is also imported to the eDirectory system using the
> below command
> keytool -importcert -alias zimbra -file Zimbra.cer -keystore
> /opt/novell/eDirectory/lib64/nds-modules/jre/lib/security/cacerts
>
>

Did you check that the eDirectory server is allowed to send e-mail
through that relay?
Does the SMTP server require a username/password? If so do you have the
correct information?

--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

It is looks like SMTP Relay issue.

Alekz already asked right questions.
0 Likes
tirthankar1984 Trusted Contributor.
Trusted Contributor.

Re: Email not delivered from eDirectory system

Hi,
From eDirectory server I am able to telnet the SMTP server port 587 and also checked with openssl command, no connection issued is reported. For SMTP server configuration in iManager I've mentioned the SMTP server host name with port (kolab.smartbhopal.city:587) and username/password.

Also I am attaching the Null Driver Trace log

[11/27/18 12:55:57.125]:BSC Generic Null ST:Start transaction.
[11/27/18 12:55:57.125]:BSC Generic Null ST:type(add-entry)entry-id(33982) dn(\T=BSC_IDV_DEV\O=bsc\OU=users\CN=sw00461378) class-id(441) class-name(User)
[11/27/18 12:55:57.126]:BSC Generic Null ST:type(add-value)Syntax=SYNTAX_CI_STRING, attributeName=Given Name, string=Shane
[11/27/18 12:55:57.127]:BSC Generic Null ST:type(add-value)Syntax=SYNTAX_DIST_NAME, distName=\BSC_IDV_DEV\bsc\users\manager
[11/27/18 12:55:57.127]:BSC Generic Null ST:type(add-value)Syntax=SYNTAX_CI_STRING, attributeName=Internet EMail Address, string=iccc-bhopal@smartbhopal.city
[11/27/18 12:55:57.127]:BSC Generic Null ST:type(add-value)Syntax=SYNTAX_CI_STRING, attributeName=CN, string=sw00461378
[11/27/18 12:55:57.128]:BSC Generic Null ST:type(add-value)Syntax=SYNTAX_CI_STRING, attributeName=Surname, string=Watson
[11/27/18 12:55:57.128]:BSC Generic Null ST:Processing events for transaction.
[11/27/18 12:55:57.129]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
</add>
</input>
</nds>
[11/27/18 12:55:57.134]:BSC Generic Null ST:Applying event transformation policies.
[11/27/18 12:55:57.134]:BSC Generic Null ST:Applying policy: %+C%14CGenerate Password%-C.
[11/27/18 12:55:57.135]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.135]:BSC Generic Null ST: Evaluating selection criteria for rule 'Generate Password'.
[11/27/18 12:55:57.135]:BSC Generic Null ST: (if-class-name equal "User") = TRUE.
[11/27/18 12:55:57.136]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.136]:BSC Generic Null ST: (if-password not-available) = TRUE.
[11/27/18 12:55:57.136]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.141]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" scope="entry">
<read-attr attr-name="nspmDistributionPassword"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.142]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.142]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.143]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762830
[11/27/18 12:55:57.143]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762830
[11/27/18 12:55:57.144]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.144]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982"/>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.146]:BSC Generic Null ST: (if-attr 'nspmDistributionPassword' not-available) = TRUE.
[11/27/18 12:55:57.146]:BSC Generic Null ST: Rule selected.
[11/27/18 12:55:57.146]:BSC Generic Null ST: Applying rule 'Generate Password'.
[11/27/18 12:55:57.146]:BSC Generic Null ST: Action: do-set-local-variable("managerName",token-src-attr("Given Name",arg-dn(token-op-attr("manager")))).
[11/27/18 12:55:57.147]:BSC Generic Null ST: arg-string(token-src-attr("Given Name",arg-dn(token-op-attr("manager"))))
[11/27/18 12:55:57.147]:BSC Generic Null ST: token-src-attr("Given Name",arg-dn(token-op-attr("manager")))
[11/27/18 12:55:57.147]:BSC Generic Null ST: arg-dn(token-op-attr("manager"))
[11/27/18 12:55:57.148]:BSC Generic Null ST: token-op-attr("manager")
[11/27/18 12:55:57.148]:BSC Generic Null ST: Token Value: "\BSC_IDV_DEV\bsc\users\manager".
[11/27/18 12:55:57.148]:BSC Generic Null ST: Arg Value: "\BSC_IDV_DEV\bsc\users\manager".
[11/27/18 12:55:57.148]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.149]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query dest-dn="\BSC_IDV_DEV\bsc\users\manager" scope="entry">
<read-attr attr-name="Given Name"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.150]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.150]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\manager.
[11/27/18 12:55:57.150]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762830
[11/27/18 12:55:57.151]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762830
[11/27/18 12:55:57.151]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.152]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=manager" src-dn="\BSC_IDV_DEV\bsc\users\manager" src-entry-id="33776">
<attr attr-name="Given Name">
<value timestamp="1538742749#4" type="string">HPE</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.153]:BSC Generic Null ST: Token Value: "HPE".
[11/27/18 12:55:57.154]:BSC Generic Null ST: Arg Value: "HPE".
[11/27/18 12:55:57.154]:BSC Generic Null ST: Action: do-set-local-variable("recepientName",token-src-attr("Internet EMail Address",arg-dn(token-op-attr("manager")))).
[11/27/18 12:55:57.154]:BSC Generic Null ST: arg-string(token-src-attr("Internet EMail Address",arg-dn(token-op-attr("manager"))))
[11/27/18 12:55:57.155]:BSC Generic Null ST: token-src-attr("Internet EMail Address",arg-dn(token-op-attr("manager")))
[11/27/18 12:55:57.155]:BSC Generic Null ST: arg-dn(token-op-attr("manager"))
[11/27/18 12:55:57.155]:BSC Generic Null ST: token-op-attr("manager")
[11/27/18 12:55:57.155]:BSC Generic Null ST: Token Value: "\BSC_IDV_DEV\bsc\users\manager".
[11/27/18 12:55:57.156]:BSC Generic Null ST: Arg Value: "\BSC_IDV_DEV\bsc\users\manager".
[11/27/18 12:55:57.156]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.156]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query dest-dn="\BSC_IDV_DEV\bsc\users\manager" scope="entry">
<read-attr attr-name="Internet EMail Address"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.163]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.164]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\manager.
[11/27/18 12:55:57.164]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762818
[11/27/18 12:55:57.165]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.165]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.166]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=manager" src-dn="\BSC_IDV_DEV\bsc\users\manager" src-entry-id="33776">
<attr attr-name="Internet EMail Address">
<value timestamp="1542873111#2" type="string">iccc-bhopal@smartbhopal.city</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.167]:BSC Generic Null ST: Token Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.168]:BSC Generic Null ST: Arg Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.168]:BSC Generic Null ST: Action: do-set-local-variable("fullName",token-op-attr("Given Name")).
[11/27/18 12:55:57.168]:BSC Generic Null ST: arg-string(token-op-attr("Given Name"))
[11/27/18 12:55:57.168]:BSC Generic Null ST: token-op-attr("Given Name")
[11/27/18 12:55:57.169]:BSC Generic Null ST: Token Value: "Shane".
[11/27/18 12:55:57.169]:BSC Generic Null ST: Arg Value: "Shane".
[11/27/18 12:55:57.169]:BSC Generic Null ST: Action: do-set-local-variable("uid",token-op-attr("CN")).
[11/27/18 12:55:57.170]:BSC Generic Null ST: arg-string(token-op-attr("CN"))
[11/27/18 12:55:57.170]:BSC Generic Null ST: token-op-attr("CN")
[11/27/18 12:55:57.170]:BSC Generic Null ST: Token Value: "sw00461378".
[11/27/18 12:55:57.171]:BSC Generic Null ST: Arg Value: "sw00461378".
[11/27/18 12:55:57.171]:BSC Generic Null ST: Action: do-set-local-variable("pwd",token-upper-case(token-substring(length="1",start="1",token-op-attr("Given Name")))+token-lower-case(token-substring(length="4",token-op-attr("Surname")))+token-char(value="35")+token-time(format="dsS",tz="IST")).
[11/27/18 12:55:57.171]:BSC Generic Null ST: arg-string(token-upper-case(token-substring(length="1",start="1",token-op-attr("Given Name")))+token-lower-case(token-substring(length="4",token-op-attr("Surname")))+token-char(value="35")+token-time(format="dsS",tz="IST"))
[11/27/18 12:55:57.172]:BSC Generic Null ST: token-upper-case(token-substring(length="1",start="1",token-op-attr("Given Name")))
[11/27/18 12:55:57.172]:BSC Generic Null ST: token-upper-case(token-substring(length="1",start="1",token-op-attr("Given Name")))
[11/27/18 12:55:57.173]:BSC Generic Null ST: token-substring(length="1",start="1",token-op-attr("Given Name"))
[11/27/18 12:55:57.173]:BSC Generic Null ST: token-substring(length="1",start="1",token-op-attr("Given Name"))
[11/27/18 12:55:57.174]:BSC Generic Null ST: token-op-attr("Given Name")
[11/27/18 12:55:57.174]:BSC Generic Null ST: Token Value: "Shane".
[11/27/18 12:55:57.174]:BSC Generic Null ST: Arg Value: "Shane".
[11/27/18 12:55:57.174]:BSC Generic Null ST: Token Value: "h".
[11/27/18 12:55:57.174]:BSC Generic Null ST: Arg Value: "h".
[11/27/18 12:55:57.175]:BSC Generic Null ST: Token Value: "H".
[11/27/18 12:55:57.175]:BSC Generic Null ST: token-lower-case(token-substring(length="4",token-op-attr("Surname")))
[11/27/18 12:55:57.175]:BSC Generic Null ST: token-lower-case(token-substring(length="4",token-op-attr("Surname")))
[11/27/18 12:55:57.176]:BSC Generic Null ST: token-substring(length="4",token-op-attr("Surname"))
[11/27/18 12:55:57.176]:BSC Generic Null ST: token-substring(length="4",token-op-attr("Surname"))
[11/27/18 12:55:57.176]:BSC Generic Null ST: token-op-attr("Surname")
[11/27/18 12:55:57.177]:BSC Generic Null ST: Token Value: "Watson".
[11/27/18 12:55:57.177]:BSC Generic Null ST: Arg Value: "Watson".
[11/27/18 12:55:57.183]:BSC Generic Null ST: Token Value: "Wats".
[11/27/18 12:55:57.184]:BSC Generic Null ST: Arg Value: "Wats".
[11/27/18 12:55:57.184]:BSC Generic Null ST: Token Value: "wats".
[11/27/18 12:55:57.184]:BSC Generic Null ST: token-char(value="35")
[11/27/18 12:55:57.184]:BSC Generic Null ST: Token Value: "#".
[11/27/18 12:55:57.184]:BSC Generic Null ST: token-time(format="dsS",tz="IST")
[11/27/18 12:55:57.186]:BSC Generic Null ST: Token Value: "2757184".
[11/27/18 12:55:57.187]:BSC Generic Null ST: Arg Value: "Hwats#2757184".
[11/27/18 12:55:57.187]:BSC Generic Null ST: Action: do-set-dest-attr-value("nspmDistributionPassword",token-local-variable("pwd")).
[11/27/18 12:55:57.187]:BSC Generic Null ST: arg-string(token-local-variable("pwd"))
[11/27/18 12:55:57.187]:BSC Generic Null ST: token-local-variable("pwd")
[11/27/18 12:55:57.187]:BSC Generic Null ST: Token Value: "Hwats#2757184".
[11/27/18 12:55:57.188]:BSC Generic Null ST: Arg Value: "Hwats#2757184".
[11/27/18 12:55:57.188]:BSC Generic Null ST: Action: do-set-src-attr-value("nspmDistributionPassword",token-local-variable("pwd")).
[11/27/18 12:55:57.188]:BSC Generic Null ST: arg-string(token-local-variable("pwd"))
[11/27/18 12:55:57.188]:BSC Generic Null ST: token-local-variable("pwd")
[11/27/18 12:55:57.189]:BSC Generic Null ST: Token Value: "Hwats#2757184".
[11/27/18 12:55:57.189]:BSC Generic Null ST: Arg Value: "Hwats#2757184".
[11/27/18 12:55:57.189]:BSC Generic Null ST: Action: do-set-op-property("newPWD",token-local-variable("pwd")).
[11/27/18 12:55:57.189]:BSC Generic Null ST: arg-string(token-local-variable("pwd"))
[11/27/18 12:55:57.189]:BSC Generic Null ST: token-local-variable("pwd")
[11/27/18 12:55:57.190]:BSC Generic Null ST: Token Value: "Hwats#2757184".
[11/27/18 12:55:57.190]:BSC Generic Null ST: Arg Value: "Hwats#2757184".
[11/27/18 12:55:57.190]:BSC Generic Null ST: Action: do-set-op-property("newCN",token-local-variable("uid")).
[11/27/18 12:55:57.190]:BSC Generic Null ST: arg-string(token-local-variable("uid"))
[11/27/18 12:55:57.190]:BSC Generic Null ST: token-local-variable("uid")
[11/27/18 12:55:57.190]:BSC Generic Null ST: Token Value: "sw00461378".
[11/27/18 12:55:57.191]:BSC Generic Null ST: Arg Value: "sw00461378".
[11/27/18 12:55:57.191]:BSC Generic Null ST: Action: do-set-op-property("newManager",token-local-variable("managerName")).
[11/27/18 12:55:57.191]:BSC Generic Null ST: arg-string(token-local-variable("managerName"))
[11/27/18 12:55:57.192]:BSC Generic Null ST: token-local-variable("managerName")
[11/27/18 12:55:57.192]:BSC Generic Null ST: Token Value: "HPE".
[11/27/18 12:55:57.192]:BSC Generic Null ST: Arg Value: "HPE".
[11/27/18 12:55:57.192]:BSC Generic Null ST: Action: do-set-op-property("newFullName",token-local-variable("fullName")).
[11/27/18 12:55:57.192]:BSC Generic Null ST: arg-string(token-local-variable("fullName"))
[11/27/18 12:55:57.193]:BSC Generic Null ST: token-local-variable("fullName")
[11/27/18 12:55:57.193]:BSC Generic Null ST: Token Value: "Shane".
[11/27/18 12:55:57.193]:BSC Generic Null ST: Arg Value: "Shane".
[11/27/18 12:55:57.193]:BSC Generic Null ST: Action: do-set-op-property("newRecepient",token-local-variable("recepientName")).
[11/27/18 12:55:57.194]:BSC Generic Null ST: arg-string(token-local-variable("recepientName"))
[11/27/18 12:55:57.194]:BSC Generic Null ST: token-local-variable("recepientName")
[11/27/18 12:55:57.194]:BSC Generic Null ST: Token Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.194]:BSC Generic Null ST: Arg Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.199]:BSC Generic Null ST: Action: do-set-src-attr-value("Login Disabled","TRUE").
[11/27/18 12:55:57.200]:BSC Generic Null ST: arg-string("TRUE")
[11/27/18 12:55:57.200]:BSC Generic Null ST: token-text("TRUE")
[11/27/18 12:55:57.200]:BSC Generic Null ST: Arg Value: "TRUE".
[11/27/18 12:55:57.200]:BSC Generic Null ST: Direct command from policy
[11/27/18 12:55:57.200]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1">
<modify-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed --><!-- content suppressed -->
</modify-attr>
<modify-attr attr-name="Login Disabled">
<remove-all-values/>
<add-value>
<value type="string">TRUE</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
[11/27/18 12:55:57.206]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.207]:BSC Generic Null ST: Performing operation modify for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.208]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762808, tempContext = 1435762818
[11/27/18 12:55:57.211]:BSC Generic Null ST: Modifying entry \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.226]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.226]:BSC Generic Null ST: Processing returned document.
[11/27/18 12:55:57.227]:BSC Generic Null ST: Processing operation <status> for .
[11/27/18 12:55:57.227]:BSC Generic Null ST:
DirXML Log Event -------------------
Driver: \BSC_IDV_DEV\system\driverset1\BSC Generic Null
Channel: Subscriber
Status: Success
[11/27/18 12:55:57.227]:BSC Generic Null ST: Direct command from policy result
[11/27/18 12:55:57.228]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" level="success"><application>DirXML</application>
<module>BSC Generic Null</module>
<object-dn></object-dn>
<component>Subscriber</component>
</status>
</output>
</nds>
[11/27/18 12:55:57.229]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.229]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.233]:BSC Generic Null ST:Applying policy: %+C%14CITManagerGroupAssignment%-C.
[11/27/18 12:55:57.233]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.233]:BSC Generic Null ST: Evaluating selection criteria for rule 'HPE IT Manager Group Assignment'.
[11/27/18 12:55:57.233]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.234]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.234]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" scope="entry">
<read-attr attr-name="isManager"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.235]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.235]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.235]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762818
[11/27/18 12:55:57.236]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.237]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.237]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982"/>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.238]:BSC Generic Null ST: (if-attr 'isManager' equal "TRUE") = FALSE.
[11/27/18 12:55:57.238]:BSC Generic Null ST: (if-operation equal "modify") = FALSE.
[11/27/18 12:55:57.238]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.239]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.239]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.242]:BSC Generic Null ST:Applying policy: %+C%14CRemoveITManagerGroupMembership%-C.
[11/27/18 12:55:57.243]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.243]:BSC Generic Null ST: Evaluating selection criteria for rule 'Remove IT Manager Group Membership'.
[11/27/18 12:55:57.243]:BSC Generic Null ST: (if-operation equal "modify") = FALSE.
[11/27/18 12:55:57.243]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.244]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.244]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.247]:BSC Generic Null ST:Applying policy: %+C%14CAddToUIoTApplication%-C.
[11/27/18 12:55:57.248]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.248]:BSC Generic Null ST: Evaluating selection criteria for rule 'Add UIoT Role'.
[11/27/18 12:55:57.248]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.248]:BSC Generic Null ST: (if-op-attr 'Title' match ".*IoT.*") = FALSE.
[11/27/18 12:55:57.249]:BSC Generic Null ST: (if-operation equal "modify") = FALSE.
[11/27/18 12:55:57.249]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.249]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.249]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.253]:BSC Generic Null ST:Applying policy: %+C%14CAdd Director Group or Director Role%-C.
[11/27/18 12:55:57.253]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.253]:BSC Generic Null ST: Evaluating selection criteria for rule 'Add to Director Group'.
[11/27/18 12:55:57.253]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.254]:BSC Generic Null ST: (if-op-attr 'Role' match ".*director.*") = FALSE.
[11/27/18 12:55:57.254]:BSC Generic Null ST: (if-operation equal "modify") = FALSE.
[11/27/18 12:55:57.254]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.254]:BSC Generic Null ST: Evaluating selection criteria for rule 'Add Director Role'.
[11/27/18 12:55:57.254]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.255]:BSC Generic Null ST: (if-op-attr 'Group Membership' equal "bsc\groups\HPE_Director") = FALSE.
[11/27/18 12:55:57.255]:BSC Generic Null ST: (if-operation equal "modify") = FALSE.
[11/27/18 12:55:57.255]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.255]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.256]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.259]:BSC Generic Null ST:Applying policy: %+C%14CGeneratePasswordOnUserEnablement%-C.
[11/27/18 12:55:57.259]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.260]:BSC Generic Null ST: Evaluating selection criteria for rule 'Generate Password on User Enablement'.
[11/27/18 12:55:57.260]:BSC Generic Null ST: (if-class-name equal "User") = TRUE.
[11/27/18 12:55:57.260]:BSC Generic Null ST: (if-op-attr 'Login Disabled' changing-to "FALSE") = FALSE.
[11/27/18 12:55:57.260]:BSC Generic Null ST: Rule rejected.
[11/27/18 12:55:57.261]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.261]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.264]:BSC Generic Null ST:Subscriber processing add for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.265]:BSC Generic Null ST:No object matching policies.
[11/27/18 12:55:57.265]:BSC Generic Null ST:No object creation policies.
[11/27/18 12:55:57.265]:BSC Generic Null ST:No object placement policies.
[11/27/18 12:55:57.265]:BSC Generic Null ST:Submitting add to subscriber shim.
[11/27/18 12:55:57.265]:BSC Generic Null ST:Applying command transformation policies.
[11/27/18 12:55:57.266]:BSC Generic Null ST:Applying policy: %+C%14CRemove from Director Group and Director Role%-C.
[11/27/18 12:55:57.266]:BSC Generic Null ST: Applying to add #1.
[11/27/18 12:55:57.266]:BSC Generic Null ST: Evaluating selection criteria for rule 'Remove from Director Group'.
[11/27/18 12:55:57.266]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.267]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.267]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" scope="entry">
<read-attr attr-name="Role"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.268]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.268]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.268]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762818
[11/27/18 12:55:57.269]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.270]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.270]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982"/>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.271]:BSC Generic Null ST: (if-attr 'Role' not-match ".*director.*") = TRUE.
[11/27/18 12:55:57.271]:BSC Generic Null ST: Rule selected.
[11/27/18 12:55:57.271]:BSC Generic Null ST: Applying rule 'Remove from Director Group'.
[11/27/18 12:55:57.272]:BSC Generic Null ST: Action: do-remove-src-attr-value("Group Membership","bsc\groups\HPE_Director").
[11/27/18 12:55:57.272]:BSC Generic Null ST: arg-string("bsc\groups\HPE_Director")
[11/27/18 12:55:57.272]:BSC Generic Null ST: token-text("bsc\groups\HPE_Director")
[11/27/18 12:55:57.272]:BSC Generic Null ST: Arg Value: "bsc\groups\HPE_Director".
[11/27/18 12:55:57.273]:BSC Generic Null ST: Action: do-remove-src-attr-value("Security Equals","bsc\groups\HPE_Director").
[11/27/18 12:55:57.273]:BSC Generic Null ST: arg-string("bsc\groups\HPE_Director")
[11/27/18 12:55:57.273]:BSC Generic Null ST: token-text("bsc\groups\HPE_Director")
[11/27/18 12:55:57.274]:BSC Generic Null ST: Arg Value: "bsc\groups\HPE_Director".
[11/27/18 12:55:57.274]:BSC Generic Null ST: Evaluating selection criteria for rule 'Remove Director Role'.
[11/27/18 12:55:57.274]:BSC Generic Null ST: (if-operation equal "add") = TRUE.
[11/27/18 12:55:57.274]:BSC Generic Null ST: Query from policy
[11/27/18 12:55:57.275]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" scope="entry">
<read-attr attr-name="Group Membership"/>
</query>
</input>
</nds>
[11/27/18 12:55:57.276]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.276]:BSC Generic Null ST: Performing operation query for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.276]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762779, tempContext = 1435762818
[11/27/18 12:55:57.277]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.277]:BSC Generic Null ST: Query from policy result
[11/27/18 12:55:57.278]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982"/>
<status level="success"></status>
</output>
</nds>
[11/27/18 12:55:57.279]:BSC Generic Null ST: (if-attr 'Group Membership' not-equal "bsc\groups\HPE_Director") = TRUE.
[11/27/18 12:55:57.279]:BSC Generic Null ST: Rule selected.
[11/27/18 12:55:57.279]:BSC Generic Null ST: Applying rule 'Remove Director Role'.
[11/27/18 12:55:57.279]:BSC Generic Null ST: Action: do-clear-src-attr-value("Role").
[11/27/18 12:55:57.280]:BSC Generic Null ST: Direct command from policy
[11/27/18 12:55:57.280]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify class-name="User" dest-dn="\BSC_IDV_DEV\bsc\users\sw00461378" dest-entry-id="33982" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1">
<modify-attr attr-name="Group Membership">
<remove-value>
<value type="string">bsc\groups\HPE_Director</value>
</remove-value>
</modify-attr>
<modify-attr attr-name="Security Equals">
<remove-value>
<value type="string">bsc\groups\HPE_Director</value>
</remove-value>
</modify-attr>
<modify-attr attr-name="Role">
<remove-all-values/>
</modify-attr>
</modify>
</input>
</nds>
[11/27/18 12:55:57.282]:BSC Generic Null ST: Pumping XDS to eDirectory.
[11/27/18 12:55:57.282]:BSC Generic Null ST: Performing operation modify for \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.283]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Duplicating : context = 1435762808, tempContext = 1435762818
[11/27/18 12:55:57.283]:BSC Generic Null ST: Modifying entry \BSC_IDV_DEV\bsc\users\sw00461378.
[11/27/18 12:55:57.286]:BSC Generic Null ST: Fixing up reciprocal link from \BSC_IDV_DEV\bsc\users\sw00461378#Group Membership.
[11/27/18 12:55:57.289]:BSC Generic Null ST: Reciprocal link: bsc\groups\HPE_Director#Member.
[11/27/18 12:55:57.290]:BSC Generic Null ST: Fixing up reciprocal link from \BSC_IDV_DEV\bsc\users\sw00461378#Security Equals.
[11/27/18 12:55:57.292]:BSC Generic Null ST: Reciprocal link: bsc\groups\HPE_Director#Equivalent To Me.
[11/27/18 12:55:57.292]:BSC Generic Null ST: --JCLNT-- \BSC_IDV_DEV\system\driverset1\BSC Generic Null : Calling free on tempContext = 1435762818
[11/27/18 12:55:57.292]:BSC Generic Null ST: Processing returned document.
[11/27/18 12:55:57.293]:BSC Generic Null ST: Processing operation <status> for .
[11/27/18 12:55:57.293]:BSC Generic Null ST:
DirXML Log Event -------------------
Driver: \BSC_IDV_DEV\system\driverset1\BSC Generic Null
Channel: Subscriber
Object: \BSC_IDV_DEV\bsc\users\sw00461378
Status: Success
[11/27/18 12:55:57.293]:BSC Generic Null ST: Direct command from policy result
[11/27/18 12:55:57.294]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" level="success"><application>DirXML</application>
<module>BSC Generic Null</module>
<object-dn>\BSC_IDV_DEV\bsc\users\sw00461378</object-dn>
<component>Subscriber</component>
</status>
</output>
</nds>
[11/27/18 12:55:57.295]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:57.295]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="manager">
<value timestamp="1543303557#8" type="dn">\BSC_IDV_DEV\bsc\users\manager</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1543303557#27" type="string">sw00461378</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1543303557#11" type="string">Watson</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.299]:BSC Generic Null ST:Filtering out notification-only attributes.
[11/27/18 12:55:57.299]:BSC Generic Null ST: Filtered out <add-attr attr-name='manager'>.
[11/27/18 12:55:57.299]:BSC Generic Null ST: Filtered out <add-attr attr-name='CN'>.
[11/27/18 12:55:57.299]:BSC Generic Null ST: Filtered out <add-attr attr-name='Surname'>.
[11/27/18 12:55:57.299]:BSC Generic Null ST:Fixing up association references.
[11/27/18 12:55:57.300]:BSC Generic Null ST:Applying schema mapping policies to output.
[11/27/18 12:55:57.300]:BSC Generic Null ST:Applying policy: %+C%14CMappingRule%-C.
[11/27/18 12:55:57.300]:BSC Generic Null ST: No mapping for class-name 'User'.
[11/27/18 12:55:57.300]:BSC Generic Null ST:No output transformation policies.
[11/27/18 12:55:57.300]:BSC Generic Null ST:Submitting document to subscriber shim:
[11/27/18 12:55:57.301]:BSC Generic Null ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.7.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<add cached-time="20181127072557.030Z" class-name="User" event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" qualified-src-dn="O=bsc\OU=users\CN=sw00461378" src-dn="\BSC_IDV_DEV\bsc\users\sw00461378" src-entry-id="33982" timestamp="1543303557#27">
<add-attr attr-name="Given Name">
<value timestamp="1543303557#5" type="string">Shane</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1543303557#6" type="string">iccc-bhopal@smartbhopal.city</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword" is-sensitive="true"><!-- content suppressed -->
</add-attr>
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</add>
</input>
</nds>
[11/27/18 12:55:57.303]:BSC Generic Null ST:Stripping operation data from input document
[11/27/18 12:55:57.304]:BSC Generic Null ST:Restoring operation data to output document
[11/27/18 12:55:57.304]:BSC Generic Null ST:SubscriptionShim.execute() returned:
[11/27/18 12:55:57.304]:BSC Generic Null ST:
<nds dtdversion="4.0">
<source>
<product build="20180222_044704" instance="BSC Generic Null" version="4.7.0.0">DirXML Null Driver</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" level="success">
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</status>
</output>
</nds>
[11/27/18 12:55:57.305]:BSC Generic Null ST:Applying input transformation policies.
[11/27/18 12:55:57.306]:BSC Generic Null ST:Applying policy: %+C%14CEmail Password on User Creation%-C.
[11/27/18 12:55:57.306]:BSC Generic Null ST: Applying to status #1.
[11/27/18 12:55:57.306]:BSC Generic Null ST: Evaluating selection criteria for rule 'Email password if Operation success'.
[11/27/18 12:55:57.306]:BSC Generic Null ST: (if-xpath true ""self::status[@level = 'success']"") = TRUE.
[11/27/18 12:55:57.307]:BSC Generic Null ST: (if-op-property 'newPWD' available) = TRUE.
[11/27/18 12:55:57.307]:BSC Generic Null ST: Rule selected.
[11/27/18 12:55:57.307]:BSC Generic Null ST: Applying rule 'Email password if Operation success'.
[11/27/18 12:55:57.307]:BSC Generic Null ST: Action: do-set-local-variable("userPWD",token-op-property("newPWD")).
[11/27/18 12:55:57.308]:BSC Generic Null ST: arg-string(token-op-property("newPWD"))
[11/27/18 12:55:57.308]:BSC Generic Null ST: token-op-property("newPWD")
[11/27/18 12:55:57.308]:BSC Generic Null ST: Token Value: "Hwats#2757184".
[11/27/18 12:55:57.308]:BSC Generic Null ST: Arg Value: "Hwats#2757184".
[11/27/18 12:55:57.309]:BSC Generic Null ST: Action: do-set-local-variable("userCN",token-op-property("newCN")).
[11/27/18 12:55:57.309]:BSC Generic Null ST: arg-string(token-op-property("newCN"))
[11/27/18 12:55:57.309]:BSC Generic Null ST: token-op-property("newCN")
[11/27/18 12:55:57.309]:BSC Generic Null ST: Token Value: "sw00461378".
[11/27/18 12:55:57.309]:BSC Generic Null ST: Arg Value: "sw00461378".
[11/27/18 12:55:57.310]:BSC Generic Null ST: Action: do-set-local-variable("userManager",token-op-property("newManager")).
[11/27/18 12:55:57.310]:BSC Generic Null ST: arg-string(token-op-property("newManager"))
[11/27/18 12:55:57.310]:BSC Generic Null ST: token-op-property("newManager")
[11/27/18 12:55:57.310]:BSC Generic Null ST: Token Value: "HPE".
[11/27/18 12:55:57.310]:BSC Generic Null ST: Arg Value: "HPE".
[11/27/18 12:55:57.311]:BSC Generic Null ST: Action: do-set-local-variable("userFullName",token-op-property("newFullName")).
[11/27/18 12:55:57.311]:BSC Generic Null ST: arg-string(token-op-property("newFullName"))
[11/27/18 12:55:57.311]:BSC Generic Null ST: token-op-property("newFullName")
[11/27/18 12:55:57.311]:BSC Generic Null ST: Token Value: "Shane".
[11/27/18 12:55:57.311]:BSC Generic Null ST: Arg Value: "Shane".
[11/27/18 12:55:57.312]:BSC Generic Null ST: Action: do-set-local-variable("emailRecepient",token-op-property("newRecepient")).
[11/27/18 12:55:57.312]:BSC Generic Null ST: arg-string(token-op-property("newRecepient"))
[11/27/18 12:55:57.312]:BSC Generic Null ST: token-op-property("newRecepient")
[11/27/18 12:55:57.312]:BSC Generic Null ST: Token Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.313]:BSC Generic Null ST: Arg Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.313]:BSC Generic Null ST: Action: do-send-email-from-template(notification-dn="Security\Default Notification Collection",template-dn="Security\Default Notification Collection\Email Manager on new Employee Hires",token-local-variable("emailRecepient"),token-local-variable("userManager"),token-local-variable("userFullName"),token-local-variable("userCN"),token-local-variable("userPWD")).
[11/27/18 12:55:57.318]:BSC Generic Null ST: to(token-local-variable("emailRecepient"))
[11/27/18 12:55:57.318]:BSC Generic Null ST: token-local-variable("emailRecepient")
[11/27/18 12:55:57.318]:BSC Generic Null ST: Token Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.318]:BSC Generic Null ST: Arg Value: "iccc-bhopal@smartbhopal.city".
[11/27/18 12:55:57.319]:BSC Generic Null ST: MANAGERSNAME(token-local-variable("userManager"))
[11/27/18 12:55:57.319]:BSC Generic Null ST: token-local-variable("userManager")
[11/27/18 12:55:57.319]:BSC Generic Null ST: Token Value: "HPE".
[11/27/18 12:55:57.320]:BSC Generic Null ST: Arg Value: "HPE".
[11/27/18 12:55:57.320]:BSC Generic Null ST: FULLNAME(token-local-variable("userFullName"))
[11/27/18 12:55:57.320]:BSC Generic Null ST: token-local-variable("userFullName")
[11/27/18 12:55:57.320]:BSC Generic Null ST: Token Value: "Shane".
[11/27/18 12:55:57.321]:BSC Generic Null ST: Arg Value: "Shane".
[11/27/18 12:55:57.321]:BSC Generic Null ST: USERID(token-local-variable("userCN"))
[11/27/18 12:55:57.321]:BSC Generic Null ST: token-local-variable("userCN")
[11/27/18 12:55:57.321]:BSC Generic Null ST: Token Value: "sw00461378".
[11/27/18 12:55:57.321]:BSC Generic Null ST: Arg Value: "sw00461378".
[11/27/18 12:55:57.322]:BSC Generic Null ST: PASSWORD(token-local-variable("userPWD"))
[11/27/18 12:55:57.322]:BSC Generic Null ST: token-local-variable("userPWD")
[11/27/18 12:55:57.322]:BSC Generic Null ST: Token Value: "-- suppressed --".
[11/27/18 12:55:57.322]:BSC Generic Null ST: Arg Value: "-- suppressed --".
[11/27/18 12:55:58.657]:BSC Generic Null ST:
DirXML Log Event -------------------
Driver: \BSC_IDV_DEV\system\driverset1\BSC Generic Null
Channel: Subscriber
Object: \BSC_IDV_DEV\bsc\users\sw00461378
Status: Error
Message: Code(-9195) Error in vnd.nds.stream://BSC_IDV_DEV/system/driverset1/BSC+Generic+Null/Email+Password+on+User+Creation#XmlData:36 : Couldn't send email: com.novell.nds.dirxml.util.mail.HandlerException: javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied

[11/27/18 12:55:58.669]:BSC Generic Null ST:Policy returned:
[11/27/18 12:55:58.670]:BSC Generic Null ST:
<nds dtdversion="4.0">
<source>
<product build="20180222_044704" instance="BSC Generic Null" version="4.7.0.0">DirXML Null Driver</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="IDAMAP302#20181127072557#1#1:2bb7a6bd-f174-4951-b221-bda6b72b74f1" level="success">
<operation-data newCN="sw00461378" newFullName="Shane" newManager="HPE" newPWD="Hwats#2757184" newRecepient="iccc-bhopal@smartbhopal.city"/>
</status>
</output>
</nds>
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

tirthankar1984 wrote:

> com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied


-->
https://github.com/mattermost/mattermost-server/issues/1012#issuecomment-147512328

--
http://www.is4it.de/en/solution/identity-access-management/

(If you find this post helpful, please click on the star below.)
______________________________________________
https://www.is4it.de/identity-access-management
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

On 11/27/2018 05:44 AM, tirthankar1984 wrote:
>
> [11/27/18 12:55:58.657]:BSC Generic Null ST:
> DirXML Log Event -------------------
> Driver: \BSC_IDV_DEV\system\driverset1\BSC Generic Null
> Channel: Subscriber
> Object: \BSC_IDV_DEV\bsc\users\sw00461378
> Status: Error
> Message: Code(-9195) Error in
> vnd.nds.stream://BSC_IDV_DEV/system/driverset1/BSC+Generic+Null/Email+Password+on+User+Creation#XmlData:36
> : Couldn't send email: com.novell.nds.dirxml.util.mail.HandlerException:
> javax.mail.SendFailedException: Invalid Addresses;
> nested exception is:
> com.sun.mail.smtp.SMTPAddressFailedException: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied


Are you able from the eDirectory box to authenticate via SMTP to the mail
server and this to this same recipient?

Does your SMTP server also show this error, I presume?

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
tirthankar1984 Trusted Contributor.
Trusted Contributor.

Re: Email not delivered from eDirectory system

I have checked with "openssl s_client -connect mail_fqdn:587 -starttls smtp" command the connection is successful between IDM and email server. Also email server log shows the same error which I have found in Driver log

Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject: RCPT from unknown[115.110.243.230]: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied; from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city> proto=ESMTP helo=<IDAMAP302>

Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject: RCPT from unknown[115.110.243.230]: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied; from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city> proto=ESMTP helo=<IDAMAP302>
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

On 01/09/2019 01:44 AM, tirthankar1984 wrote:
>
> I have checked with "openssl s_client -connect mail_fqdn:587 -starttls
> smtp" command the connection is successful between IDM and email server.


Nice work, but making a connection and sending an e-mail are different
things, so on we go.

> Also email server log shows the same error which I have found in Driver
> log
>
> Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject:
> RCPT from unknown[115.110.243.230]: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied;
> from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city>
> proto=ESMTP helo=<IDAMAP302>
>
> Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject:
> RCPT from unknown[115.110.243.230]: 554 5.7.1
> <unknown[115.110.243.230]>: Client host rejected: Access denied;
> from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city>
> proto=ESMTP helo=<IDAMAP302>


Good; as alekz suggested with his questions on 2018-11-26, the e-mail
server is rejecting you. Until the e-mail server side is fixed, this will
likely not change.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

tirthankar1984;2493313 wrote:
I have checked with "openssl s_client -connect mail_fqdn:587 -starttls smtp" command the connection is successful between IDM and email server. Also email server log shows the same error which I have found in Driver log

Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject: RCPT from unknown[115.110.243.230]: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied; from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city> proto=ESMTP helo=<IDAMAP302>

Jan 1 12:13:49 kolab postfix/submission/smtpd[27886]: NOQUEUE: reject: RCPT from unknown[115.110.243.230]: 554 5.7.1 <unknown[115.110.243.230]>: Client host rejected: Access denied; from=<iccc-bhopal@smartbhopal.city> to=<iccc-bhopal@smartbhopal.city> proto=ESMTP helo=<IDAMAP302>


Hi tirthankar,
Like I mentioned early, it looks like SMTP Mail relay (postfix) configuration issue.

I saw in one of the Linux forums thread about similar issue

Mar 20 12:46:44 serverlinux postfix/smtpd[11394]: NOQUEUE: reject: RCPT from nm19.bullet.mail.ird.yahoo.com[77.238.189.76]: 554 5.7.1 <nm19.bullet.mail.ird.yahoo.com[77.238.189.76]>: Client host rejected: Access denied; from=<xxxx@yahoo.fr> .


problem solved!!!!!!!!!!!!!!!!!!!
I had to comment smtpd_client_restrictions -O in the /etc/postfix/master.cf
Code:
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
my server was not permitting others MTA to establish a connction ,only authenticated users was allowed.

i hope this will save you some trouble.
0 Likes
tirthankar1984 Trusted Contributor.
Trusted Contributor.

Re: Email not delivered from eDirectory system

Hi,
This settings is not working for Zimbra. Also when enabling the TLS Authentication, mails could not get delivered from IDM as well as Java Client. Any suggestion.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Email not delivered from eDirectory system

On 01/17/2019 05:34 AM, tirthankar1984 wrote:
>
> This settings is not working for Zimbra. Also when enabling the TLS


I think the steps provided were for Postfix, so if your server throwing
the error upstream is Zimbra, then you need to find something equivalent,
or a fix to whatever problem Zimbra has, for it. For all I know Zimbra
may be a packaged instance of Postfix, so maybe that is why the Postfix
suggestion was provided, but we'll need to rely on you to fix the upstream
server.

At the en of the day, the error you originally posted was coming from the
e-mail server, so fixing it likely needs to happen there with settings or
changes appropriate to that server. Is that what you tried?

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.