eDir -> OpenLDAP | Login Disabled

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Great job. Thank-you for posting back your functional rule as well.

Good luck.





tjwiley wrote:
> Thank you so much to both of you. I finally got this working. I had to
> strace -f -s 9999999 -p <<process_id>> to see what was being sent to the
> OpenLDAP instance & that helped a lot. I don't know why I hadn't
> thought of tcpdump or strace. That said, I was right...it was sending
> the value in lowercase...which for whatever reason won't work because
> boolean attributes in LDAP require uppercase TRUE/FALSE. I had to play
> with the policy to get it to do The Right Thing (TM). So...here's what
> I have that's working in case anyone else comes across this thread
> suffering from the same problem. This policy lives in the subscriber
> channel's command transformation policy set.
>
>
> Code:
> --------------------
> <?xml version="1.0" encoding="UTF-8"?><policy>
> <rule>
> <description>Convert logindisabled to OpenLDAP format</description>
> <comment xml:space="preserve">This policy tries to get OpenLDAP to accept the value of Login Disabled.</comment>
> <conditions>
> <and>
> <if-op-attr name="Login Disabled" op="changing"/>
> </and>
> </conditions>
> <actions>
> <do-reformat-op-attr name="Login Disabled">
> <arg-value type="state">
> <token-upper-case>
> <token-local-variable name="current-value"/>
> </token-upper-case>
> </arg-value>
> </do-reformat-op-attr>
> </actions>
> </rule>
> </policy>
> --------------------
>
>
> Thanks again to the both of you, I've been beating my head against this
> wall for WAY too long.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJK73RMAAoJEF+XTK08PnB5ho8QAMNOFQqLL5 cgS5u2Mw9Gi7fD
LKyt23cPl1BFUD1AiSj95ZWEXpZGcu2M1uiChYfQ2KC4nPNVE3 OcTUPHKM25Egj2
gNpWv1r2ZwXWGvKbMA+AJELB93Gms7SVd6mkaZsmbGOUvTxrQQ Qe9fv6zadLQ3NL
JGfy2UgX+AoGOOxlCU6vBGNxzY7dJnTsMlebe8thr9ovlWa8hw/tfyY1Pd9gU2jf
qjI/M8iIOlJJnB4TO2REuw+F6LWilGc/xPeWFJICpfRnJXPG8MxNT4/MIjuB+uIs
XY+UiLn92vYBxkwUdlg4ibW2Lf5jJLceqkT0QJZ5bf635favqS 2xgkhCQnFXC+vb
cvNhxT3C5vuQsLo6ax2B707W69dwuRNEmdvU13U/UCn8xK2/5R/1Rx01N+mVN8+3
rXqPdbxBgWc6Ft4wUapzNEn+EBeawwjBBu18kSkQl4utJu4MxF 5YMPwnXN3yixmk
LKEDk4CdyH0TLvjrxul4cUlKO2YkgHum7B8/kqOo9Y6M+pdmey72itFeMalHahWh
LhohE1EgRtTzWwUokr0CxN20N/Tq5OSl0CPYTeIrB8/acHU2HKemaYqCTXo7Qaes
zZTtW64A/WtJmKEs6xGAkflDaXQhWcNJs/7BYmNDskkTiQIDz0kgCUCTg3YOYWx4
ORcdH/UcSYqoshQt+/pK
=akcs
-----END PGP SIGNATURE-----