unable to move users from ad mutliple ou to edirectory ou's

[sagar_mokal]

Hi,

i have configured publisher placement policies for multiple ou's of active directory to edirectory ou's but users are not provisioning to edirectory appropriate ou's and getting following error.

Please suggest me on this below and correct me on this below policy.

Message: Code(-9064) No DN generated by object placement policy.<application>DirXML</application>.


<rule>
<description>placement for user from xxx OU</description>
<comment xml:space="preserve">Construct a destination DN for all object types assuming simple object name mapping.</comment>
<conditions>
<and>
<if-class-name op="equal">User</if-class-name>
<if-src-dn op="in-container">OU=xxx,DC=xxxxxx</if-src-dn>
<if-class-name disabled="true" notrace="true" op="equal">*</if-class-name>
</and>
</conditions>
<actions>
<do-set-op-dest-dn>
<arg-dn>
<token-text xml:space="preserve">data\users\xxxxxx</token-text>
<token-text xml:space="preserve">\</token-text>
</arg-dn>
</do-set-op-dest-dn>
<do-if>
<arg-conditions>
<and>
<if-global-variable mode="nocase" name="drv.pubPlacementType" op="equal">flat</if-global-variable>
</and>
</arg-conditions>
<arg-actions>
<do-set-op-dest-dn>
<arg-dn>
<token-global-variable name="idv.dit.data.users"/>
<token-text xml:space="preserve">\</token-text>
<token-src-name/>
</arg-dn>
</do-set-op-dest-dn>
</arg-actions>
<arg-actions>
<do-set-op-dest-dn>
<arg-dn>
<token-global-variable name="idv.dit.data.users"/>
<token-text xml:space="preserve">\</token-text>
<token-op-property name="unmatched-src-dn"/>
</arg-dn>
</do-set-op-dest-dn>
</arg-actions>
</do-if>
<do-set-op-dest-dn disabled="true">
<arg-dn>
<token-text xml:space="preserve">"data\users\xxx" + "\"</token-text>
</arg-dn>
</do-set-op-dest-dn>
</actions>
</rule>
</policy>


Thanks,
Sagar

[al_b]

Hi Sagar,

<do-set-op-dest-dn disabled="true">
<arg-dn>
<token-text xml:space="preserve">"data\users\xxx" + "\"</token-text>
</arg-dn>
</do-set-op-dest-dn>

You have to specify user destination DN.
Currently, you specified Container DN, but engine needs "full" object DN.

[sagar_mokal]

Hi al_b,

Thank you for update.

ou=xxx,ou=users,o=data is my user destination dn. If i am wrong , please give some example to help us.


Thanks,
Sagar

[sagar_mokal]

Hi Al_b,

Thank you for reply.

we have multiple ou's in ad and created as same ou names in the edirectory and want to provision multiple ou's ad user data to edirectory multiple ou's. Please help us on this.

If you provide xml , it will be helpful to us.

Thanks,
Sagar.

[geoffc]

On 11/14/2018 5:14 AM, sagar mokal wrote:
>
> Hi Al_b,
>
> Thank you for reply.
>
> we have multiple ou's in ad and created as same ou names in the
> edirectory and want to provision multiple ou's ad user data to
> edirectory multiple ou's. Please help us on this.

What Alex said was, the Dest-dn needs to be a full DN.

I.e. o\ou\ou\UserName

You are just providing the parent container, which is o\ou\ou\ without
the RDN, the leafmost node of the path.

For a move, you are correct, you specify the container. For an
op-dest-dn token you include the username at the end of it.