Knowledge Partner
Knowledge Partner
315 views

Re: How can I assign a multi-value fields to AD ?

Split generates a nodeset.

Try for-each ver the the Split of Source Attr internet email address.

Then inside the for each, add dest attr with the value from local
varaible current-node.


On 6/26/2012 5:16 AM, ayeungied wrote:
>
> I am going to create a user with mailbox from eDir to AD (windows 2003),
> I use the create user interface to add the user related info, the
> Internet Email Address filed should be a multi-value field, I type in
> abc@xxx.com then abc@xxx1.com and then abc@xxx2.com, the delimiter is
> ;.
>
> Then use the following statement to try to split them and assign them
> to the AD multi-value attribute "otherPager" but failed to add user with
> errors:-
>
> add destination attribute value ("otherPager", class name="user",
> when="after", Split (delimiter=";", Source Attribute ("Internet EMail
> Address") ) )
>
> DirXML Log Event -------------------
> Driver = \EIEDDEV\abc\adm\IDMDriverSet on idmdev1\NDStoADE2K7GC2
> Thread = Subscriber Channel
> Object = \EIEDDEV\abc\users\itsmbx2606v11
> (CN=itsmbx2606v11,ou=staff,ou=IEdUsers,dc=emaildev,dc=abc,dc=def,dc=hk)
> Level = error
> Message = <ldap-err ldap-rc="19"
> ldap-rc-name="LDAP_CONSTRAINT_VIOLATION">
> <client-err ldap-rc="19"
> ldap-rc-name="LDAP_CONSTRAINT_VIOLATION">Constraint
> Violation</client-err>
> <server-err>00002081: AtrErr: DSID-03151125, #1:
> 0: 00002081: DSID-03151125, problem 1005 (CONSTRAINT_ATT_TYPE), data
> 0, Att 150003 (mail)
> </server-err>
> <server-err-ex win32-rc="8321"/>
> </ldap-err>
> DirXML: [06/26/12 15:18:50.98]:
> DirXML Log Event -------------------
> Driver = \EIEDDEV\abc\adm\IDMDriverSet on idmdev1\NDStoADE2K7GC2
> Thread = Subscriber Channel
> Object = \EIEDDEV\abc\users\itsmbx2606v11
> (CN=itsmbx2606v11,ou=staff,ou=ABcUsers,dc=emaildev,dc=abc,dc=def,dc=hk)
> Level = warning
> Message = <ldap-err ldap-rc="32"
> ldap-rc-name="LDAP_NO_SUCH_OBJECT">
> <client-err ldap-rc="32" ldap-rc-name="LDAP_NO_SUCH_OBJECT">No Such
> Object</client-err>
> <server-err>0000208D: NameErr: DSID-031001CD, problem 2001
> (NO_OBJECT), data 0, best match of:
> 'OU=Staff,OU=IEdUsers,DC=emaildev,DC=abc,DC=def,DC=hk'
> </server-err>
> <server-err-ex win32-rc="8333"/>
>
> Any idea?
>
>



Labels (1)
0 Likes
6 Replies
Knowledge Partner
Knowledge Partner

Re: How can I assign a multi-value fields to AD ?

On 6/26/2012 11:56 PM, ayeungied wrote:
>
> Hi geoffc,
>
> Thank you very much for the hint, it works fine now.
>
> I would like to ask for one more question:-
>
> When I located the source code in the ExchangeMailbox creation policy
> under the Creation Policy, the coding works fine, while I located it in
> the assign MiscAttribute policy (created by myslef) in the Commond
> Transformation Policy, it cannot be work. So what are the criteria we
> choose to locate the policy?


I think I would have to see trace of what is happening to understand why
it works in one place and not the other.

However, if you are wondering why somethings go in Event, Command, or
Create policy set locations, then you really should read this great
intro to IDM concepts by a forum poster here, David Gersic.

http://www.novell.com/communities/node/6679/guided-tour-novell-identity-manager
http://www.novell.com/communities/node/6696/guided-tour-novell-identity-manager
http://www.novell.com/communities/node/6697/guided-tour-novell-identity-manager

>
> for each (nodeset (Split (delimiter=";", Source Attribute ("Internet
> EMail Address", class name="User") ) ) , actions (add destination
> attribute value ("otherPager", class name="User", when="after", Local
> Variable ("current-node") ) ) )


Thanks for reporting back your results.


0 Likes
Knowledge Partner
Knowledge Partner

Re: How can I assign a multi-value fields to AD ?

On 6/27/2012 9:56 PM, ayeungied wrote:
>
> Hi geoffc,
>
> Thank you very much for the great intro to IDM concepts.


Look in the engine-drivers forum. There is either a sticky post of an
Article listing the things everyone learning IDM should read. There are
many more good ones there.



0 Likes
Knowledge Partner
Knowledge Partner

Re: How can I assign a multi-value fields to AD ?

On 6/28/2012 11:06 PM, ayeungied wrote:
>
> Hi Geoffc,
>
> The assign mulit-value fields to AD rule cannot be worked suddenly. It
> does work for sync multi valued attributes from NDS to AD on 26 am and
> could create a user successfully that morning, I'd have leave on the pm
> session that day. It cannot be worked from yesterday on after I created
> some new rule sets in the Common Transformation Policies part . ( I've
> removed them then but it still cannot be worked.)
>
> I've tried to add 2 users this morning, the 1st one is named
> itsmbx2906v3, it can be created while I only fill in one email address
> in the Internet email address attribute, however, when I fill in 2 email
> addresses - abc@ied.edu.hk def@ied.edu.hk to create itsmbx2906v4, error
> comes up.
>
> Would you mind to comment what's wrong?
>
> How can I email the logs to you? I got a zipped one, its size is 150KB.


My full name (See the header of the message) @gmail.com

But you can post to http://susepaste.org/


0 Likes
Knowledge Partner
Knowledge Partner

Re: How can I assign a multi-value fields to AD ?

On 6/28/2012 11:46 PM, ayeungied wrote:
>
> Hi Geoffc,
>
> Just emailed the logs to your geoffc@gmail.com account.


I meant my full name, not my username. FirstLast no spaces.




0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: How can I assign a multi-value fields to AD ?

Agnes,

I think Geoff wanted to avoid seeing his email address posted here

W
0 Likes
Knowledge Partner
Knowledge Partner

Re: How can I assign a multi-value fields to AD ?

On 7/1/2012 4:06 AM, ayeungied wrote:
>
> Hi Geoffc,
>
> Sorry.
>
> I've just emailed the info to your account GeoffreyCarman@gmail.com.


Did you understand the reason why I did not type my email in full in the
message? Why do you think I might do that, rather than simply tell you
the full email?

And then consider how helpful it is that you just went and put it in a
message. I am trying to at least minorly avoid spammers finding my
address, and you just posted it.

I have the message, and will look at it when I have some time.



0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.