IDM x LDAP (eDIR) Don't work

[thiagoferreira]

On Fri, 05 Jun 2009 19:46:03 +0000, thiagoferreira wrote:

> I have configurate the IDM to work with driver LDAP and my server LDAP
> is another eDirectory.
> When I select to Migrate from Identity Vault i get this error on log:

Ignore the log, it's useless for actual troubleshooting. Get a level 3
trace of the migrate event and post it here so we can see what your
driver configuration is doing that is resulting in this error.


--
---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Novell Knowledge Partner http://forums.novell.com

Please post questions in the newsgroups. No support provided via email.

Thanks for your atention.
The trace is dow[06/05/09 17:38:09.504]:LDAP_Corporativo :Reading named passwords list.
[06/05/09 17:38:09.508]:LDAP_Corporativo :Named passwords:
[06/05/09 17:38:09.510]:LDAP_Corporativo :Reading XML attribute vnd.nds.stream://EDIR-IDM/idm/DS_Ldap/LDAP_Corporativo#DirXML-EngineControlValues.
[06/05/09 17:38:09.518]:LDAP_Corporativo :Reading XML attribute vnd.nds.stream://EDIR-IDM/idm/DS_Ldap#DirXML-ConfigValues.
[06/05/09 17:38:09.522]:LDAP_Corporativo :Reading XML attribute vnd.nds.stream://EDIR-IDM/idm/DS_Ldap/LDAP_Corporativo#DirXML-ConfigValues.
[06/05/09 17:38:09.538]:LDAP_Corporativo :Global Configuration Values:
[06/05/09 17:38:09.539]:LDAP_Corporativo : Name: ConnectedSystemName Value: LDAP
[06/05/09 17:38:09.540]:LDAP_Corporativo : Name: driver.ldap.base.container Value: ou=users,o=lab
[06/05/09 17:38:09.540]:LDAP_Corporativo : Name: drv.entitlement.display Value: hide
[06/05/09 17:38:09.541]:LDAP_Corporativo : Name: driver.ldap.ent.use Value: true
[06/05/09 17:38:09.542]:LDAP_Corporativo : Name: drv.entitlement.remove Value: nothing
[06/05/09 17:38:09.543]:LDAP_Corporativo : Name: pwd-mgt-display Value: hide
[06/05/09 17:38:09.544]:LDAP_Corporativo : Name: enable-password-subscribe Value: true
[06/05/09 17:38:09.544]:LDAP_Corporativo : Name: enable-password-publish Value: true
[06/05/09 17:38:09.545]:LDAP_Corporativo : Name: publish-password-to-nds Value: true
[06/05/09 17:38:09.545]:LDAP_Corporativo : Name: publish-password-to-dp Value: false
[06/05/09 17:38:09.546]:LDAP_Corporativo : Name: enforce-password-policy Value: true
[06/05/09 17:38:09.546]:LDAP_Corporativo : Name: reset-external-password-on-failure Value: true
[06/05/09 17:38:09.546]:LDAP_Corporativo : Name: notify-user-on-password-dist-failure Value: true
[06/05/09 17:38:09.547]:LDAP_Corporativo : Name: drv.acctTrk.display Value: hide
[06/05/09 17:38:09.547]:LDAP_Corporativo : Name: drv.acctTrk.enable Value: false
[06/05/09 17:38:09.547]:LDAP_Corporativo : Name: drv.acctTrk.realm Value:
[06/05/09 17:38:09.548]:LDAP_Corporativo : Name: drv.acctTrk.identifiers Value: LDAPDN;association
[06/05/09 17:38:09.548]:LDAP_Corporativo : Name: drv.acctTrk.statusAttr Value: loginDisabled
[06/05/09 17:38:09.548]:LDAP_Corporativo : Name: drv.acctTrk.activeStatus Value: FALSE
[06/05/09 17:38:09.549]:LDAP_Corporativo : Name: drv.acctTrk.inactiveStatus Value: TRUE
[06/05/09 17:38:09.549]:LDAP_Corporativo : Name: drv.acctTrk.idvDefaultStatus Value: A
[06/05/09 17:38:09.549]:LDAP_Corporativo : Name: drv.acctTrk.appDefaultStatus Value: -
[06/05/09 17:38:09.550]:LDAP_Corporativo : Name: idv.dit.data.users Value: data\company\users
[06/05/09 17:38:09.550]:LDAP_Corporativo : Name: idv.dit.data.groups Value: data\company\groups
[06/05/09 17:38:09.551]:LDAP_Corporativo : Name: dirxml.auto.treename Value: EDIR-IDM
[06/05/09 17:38:09.551]:LDAP_Corporativo : Name: dirxml.auto.driverdn Value: \EDIR-IDM\idm\DS_Ldap\LDAP_Corporativo
[06/05/09 17:38:09.551]:LDAP_Corporativo : Name: dirxml.auto.driverguid Value: {BE2E9B55-F3DC-4636-97A6-559B2EBEDCF3}
[06/05/09 17:38:09.552]:LDAP_Corporativo :Using default reciprocal attribute map
[06/05/09 17:38:09.553]:LDAP_Corporativo :Reading XML attribute vnd.nds.stream://EDIR-IDM/idm/DS_Ldap/LDAP_Corporativo#DirXML-PersistentData.
[06/05/09 17:38:09.554]:LDAP_Corporativo :Loaded persistent data
[06/05/09 17:38:09.554]:LDAP_Corporativo :
<persistent-data>
<op-counters last-reset-time="1244224180455">
<subscriber>
<counters index="0">
<sync>14</sync>
</counters>
<counters index="1">
<sync>14</sync>
</counters>
<counters index="2">
<query>13</query>
<add>12</add>
</counters>
<counters index="3">
<query>13</query>
<add>12</add>
</counters>
<counters index="4">
<status>25</status>
</counters>
</subscriber>
<publisher>
<counters index="0">
<status>185</status>
<query>15</query>
</counters>
<counters index="1">
<status>185</status>
<query>15</query>
</counters>
<counters index="2">
<status>185</status>
<query>15</query>
</counters>
<counters index="3">
<status>185</status>
<query>15</query>
...skipping...
<association/>
<source>
<product build="20080710_083657" instance="LDAP_Corporativo" version="3.5.5">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idmNovellLab#20090605204044#1#1" level="error">LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: NDS error: no such entry (-601)
LDAPException: Matched DN: ou=users,o=lab<operation-data>
<password-subscribe-status>
<association/>
</password-subscribe-status>
</operation-data>
</status>
</output>
</nds>
[06/05/09 17:40:44.846]:LDAP_Corporativo ST:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp%-C.
[06/05/09 17:40:44.846]:LDAP_Corporativo ST: Applying to status #1.
[06/05/09 17:40:44.846]:LDAP_Corporativo ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
[06/05/09 17:40:44.847]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.848]:LDAP_Corporativo ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
[06/05/09 17:40:44.848]:LDAP_Corporativo ST: Rule rejected.
[06/05/09 17:40:44.849]:LDAP_Corporativo ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
[06/05/09 17:40:44.850]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.850]:LDAP_Corporativo ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
[06/05/09 17:40:44.851]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.851]:LDAP_Corporativo ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
[06/05/09 17:40:44.852]:LDAP_Corporativo ST: Rule rejected.
[06/05/09 17:40:44.852]:LDAP_Corporativo ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
[06/05/09 17:40:44.853]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.854]:LDAP_Corporativo ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
[06/05/09 17:40:44.854]:LDAP_Corporativo ST: Rule rejected.
[06/05/09 17:40:44.854]:LDAP_Corporativo ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
[06/05/09 17:40:44.855]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.856]:LDAP_Corporativo ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
[06/05/09 17:40:44.856]:LDAP_Corporativo ST: Rule rejected.
[06/05/09 17:40:44.857]:LDAP_Corporativo ST: Evaluating selection criteria for rule 'Generate Audit Event'.
[06/05/09 17:40:44.857]:LDAP_Corporativo ST: (if-operation equal "status") = TRUE.
[06/05/09 17:40:44.858]:LDAP_Corporativo ST: (if-local-variable 'auditEventID' available) = FALSE.
[06/05/09 17:40:44.858]:LDAP_Corporativo ST: Rule rejected.
[06/05/09 17:40:44.858]:LDAP_Corporativo ST:Policy returned:
[06/05/09 17:40:44.859]:LDAP_Corporativo ST:
<nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20080710_083657" instance="LDAP_Corporativo" version="3.5.5">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idmNovellLab#20090605204044#1#1" level="error">LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: NDS error: no such entry (-601)
LDAPException: Matched DN: ou=users,o=lab<operation-data>
<password-subscribe-status>
<association/>
</password-subscribe-status>
</operation-data>
</status>
</output>
</nds>
[06/05/09 17:40:44.862]:LDAP_Corporativo ST:Applying schema mapping policies to input.
[06/05/09 17:40:44.863]:LDAP_Corporativo ST:Applying policy: %+C%14Csmp%-C.
[06/05/09 17:40:44.864]:LDAP_Corporativo ST:Resolving association references.
[06/05/09 17:40:44.865]:LDAP_Corporativo ST:Processing returned document.
[06/05/09 17:40:44.865]:LDAP_Corporativo ST:Processing operation <status> for .
[06/05/09 17:40:44.866]:LDAP_Corporativo ST:
DirXML Log Event -------------------
Driver: \EDIR-IDM\idm\DS_Ldap\LDAP_Corporativo
Channel: Subscriber
Object: \EDIR-IDM\idm\users\thiago
Status: Error
Message: LDAPException: No Such Object (32) No Such Object
LDAPException: Server Message: NDS error: no such entry (-601)
LDAPException: Matched DN: ou=users,o=lab
[06/05/09 17:40:44.881]:LDAP_Corporativo ST:End transaction.
n: