Hi,

I have a special IDM implementation to synchronize 2 eDirectory trees
and, for old directory design, I need to associate and synchronize a
single group, to multiple groups.

This thread is continued from here
http://forums.novell.com/netiq/netiq...edir-edir.html.

lhaeger helped me to do it using XPath (very thanks!) and is working
fine in multiple group to single group direction, but not in the other
way.

I'm not an expert in XPath and I don't know how to solve it.

I prepared a little VM environment to describe exactly what's happening
and post only this exact problem.

ACME-TREE (IDM) - DrvIDM-to-NDS.log - single side group - the groups
are in idvault\groups\special\<group_name>
CORP-TREE (CORP) - DrvNDS-to-IDM.log - multiple side group - the groups
are in data\groups\site<N>\<group_name> where N are different sites
(site1, site2, site3, etc.)

The process I've captured and traced is:

- Migrate from Identity Vault (ACME-TREE) a group named "testmulti"
- In CORP-TREE I have 3 groups with the same CN:
data\groups\site1\testmulti, data\groups\site2\testmulti,
data\groups\site3\testmulti

The rule I'm using on DrvNDS-to-IDM, Matching Policies, Publisher
Channel is:


Code:
--------------------
<rule>
<description>new-Match SPECIAL GRUPS</description>
<conditions>
<and>
<if-class-name mode="nocase" op="equal">Group</if-class-name>
<if-src-dn op="in-subtree">idvault\groups\special\</if-src-dn>
</and>
</conditions>
<actions>
<do-if>
<arg-conditions>
<and>
<if-dest-dn op="not-available"/>
</and>
</arg-conditions>
<arg-actions>
<do-find-matching-object scope="subtree">
<arg-dn>
<token-text xml:space="preserve">data\groups</token-text>
</arg-dn>
<arg-match-attr name="CN"/>
</do-find-matching-object>
<do-if>
<arg-conditions>
<and>
<if-xml-attr mode="regex" name="dest-dn" op="equal">\uFFFD</if-xml-attr>
</and>
</arg-conditions>
<arg-actions>
<do-for-each>
<arg-node-set>
<token-query class-name="Group">
<arg-match-attr name="CN"/>
</token-query>
</arg-node-set>
<arg-actions>
<do-set-local-variable name="destgrup" scope="policy">
<arg-string>
<token-xpath expression="$current-node/@src-dn"/>
</arg-string>
</do-set-local-variable>
<do-add-association direct="true">
<arg-dn>
<token-local-variable name="destgrup"/>
</arg-dn>
<arg-association>
<token-association/>
</arg-association>
</do-add-association>
</arg-actions>
</do-for-each>
<do-strip-xpath expression="."/>
</arg-actions>
<arg-actions>
<do-break/>
</arg-actions>
</do-if>
</arg-actions>
</do-if>
</actions>
</rule>
--------------------


And the result is very interesting, and I think I'm very close to do
it:

- As you could see in the attached logs below, the rule is working and
is detecting the multiple groups.
- In CORP-TREE the multiple groups are associated using the same
association value.
- But, the problem is in the single side group (ACME-TREE) the
"testmulti" group is not associated.
- In the logs, I can see is vetoed by object matching policy but I want
to discard this and force the association between these groups.

As I explained in the first lines of this thread, this implementation
works in the other way perfect (multiple groups to single group),
synchronizing users, etc.

I understand this isn't an usual and easy situation but any help will
be very very appreciated.

Thank you!

Regards

DrvIDM-to-NDS.log:

Code:
--------------------

[04/25/12 10:53:56.672]rvNDS-to-CORP PT:: Need new connection; Waiting for remote Subscriber to connect...
[04/25/12 10:54:06.345]rvNDS-to-CORP ST:Start transaction.
[04/25/12 10:54:06.345]rvNDS-to-CORP ST:Processing events for transaction.
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<sync cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
</sync>
</input>
</nds>
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:No event transformation policies.
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:Subscriber processing sync for \ACME-TREE\idvault\groups\special\testmulti.
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:Reading relevant attributes from \ACME-TREE\idvault\groups\special\testmulti.
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="Group" dest-dn="\ACME-TREE\idvault\groups\special\testmulti" dest-entry-id="33736" scope="entry">
<read-attr attr-name="CN"/>
<read-attr attr-name="Description"/>
<read-attr attr-name="GUID"/>
</query>
</input>
</nds>
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:Pumping XDS to eDirectory.
[04/25/12 10:54:06.360]rvNDS-to-CORP ST:Performing operation query for \ACME-TREE\idvault\groups\special\testmulti.
[04/25/12 10:54:06.407]rvNDS-to-CORP ST:Read result:
[04/25/12 10:54:06.407]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="Group" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736">
<association state="migrate"></association>
<attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</attr>
<attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[04/25/12 10:54:06.407]rvNDS-to-CORP ST:Synthetic add:
[04/25/12 10:54:06.407]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
<status level="success"></status>
</output>
</nds>
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:No object matching policies.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:No object creation policies.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:No object placement policies.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Submitting add to subscriber shim.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Applying command transformation policies.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Applying policy: %+C%14Csub-ctp-TransformDistributionPassword%-C.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Convert adds of the nspmDistributionPassword attribute to password elements'.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-operation equal "add") = TRUE.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-op-attr 'nspmDistributionPassword' available) = FALSE.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Block modifies for failed password publish operations if reset password if false'.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-global-variable 'reset-external-password-on-failure' equal "false") = FALSE.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Convert modifies of a nspmDistributionPassword attribute to a modify password operation'.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-operation equal "modify") = FALSE.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Block empty modify operations'.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-operation equal "modify") = FALSE.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Applying policy: %+C%14Csub-ctp-DefaultPasswordPolicy%-C.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.423]rvNDS-to-CORP ST:Applying policy: %+C%14Csub-ctp-CheckPasswordGCV%-C.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Block subscribing to passwords when objects are added'.
[04/25/12 10:54:06.423]rvNDS-to-CORP ST: (if-global-variable 'enable-password-subscribe' equal "false") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Block subscribing to password modifications'.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-global-variable 'enable-password-subscribe' equal "false") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Applying policy: %+C%14Csub-ctp-AddPasswordPayload%-C.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Add operation-data element to password subscribe operations'.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "add") = TRUE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-password available) = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "modify-password") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Add payload data to a reset password from a failed password publish operation'.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "modify-password") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Add operation-data element to password subscribe operations'.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "add") = TRUE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-password available) = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "modify-password") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Filtering out notification-only attributes.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Fixing up association references.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:No schema mapping policies.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Applying output transformation policies.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Applying policy: %+C%14Csub-otp-EmailOnFailedPasswordPub%-C.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: (if-operation equal "status") = FALSE.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:06.438]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Applying to add #1.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Rule selected.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Action: do-if().
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Evaluating conditions.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Performing if actions.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST: Action: do-break().
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:Submitting document to subscriber shim:
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:: Need new connection.
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:: Connecting to remote Publisher at 10.0.1.121:8196
[04/25/12 10:54:06.454]rvNDS-to-CORP ST:: Creating an NTLSSocket
[04/25/12 10:54:06.516]rvNDS-to-CORP ST:: Opening connection...
[04/25/12 10:54:06.516]rvNDS-to-CORP ST:: Connection opened.
[04/25/12 10:54:06.516]rvNDS-to-CORP ST:: handshake
[04/25/12 10:54:06.516]rvNDS-to-CORP ST:: send key
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Sending...
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Document sent.
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Waiting for receive...
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Receiving...
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Received.
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: received key
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: using non-serialized XML communications method
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Sending...
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Document sent.
[04/25/12 10:54:06.532]rvNDS-to-CORP ST:: Waiting for receive...
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:: Received.
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:SubscriptionShim.execute() returned:
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:Applying input transformation policies.
[04/25/12 10:54:07.000]rvNDS-to-CORP ST:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Applying to status #1.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Rule selected.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Action: do-if().
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Evaluating conditions.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Performing if actions.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Action: do-break().
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Applying to status #1.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Rule selected.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Applying rule 'AccountTracking - disregard if disabled'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Action: do-break().
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Applying policy: %+C%14Cpub-itp-EmailOnFailedPasswordSub%-C.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Applying to status #1.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-operation equal "status") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-operation equal "status") = TRUE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST: Rule rejected.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Policy returned:
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:No schema mapping policies.
[04/25/12 10:54:07.016]rvNDS-to-CORP ST:Resolving association references.
[04/25/12 10:54:07.031]rvNDS-to-CORP ST:Processing returned document.
[04/25/12 10:54:07.031]rvNDS-to-CORP ST:Processing operation <status> for .
[04/25/12 10:54:07.031]rvNDS-to-CORP ST:
DirXML Log Event -------------------
Driver: \ACME-TREE\services\DrvSet\DrvNDS-to-CORP
Channel: Subscriber
Object: \ACME-TREE\idvault\groups\special\testmulti
Status: Warning
Message: Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
[04/25/12 10:54:07.031]rvNDS-to-CORP ST:End transaction.
--------------------


DrvNDS-to-IDM:

Code:
--------------------

[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: Opening connection...
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: Connection opened.
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: handshake
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: Waiting for receive...
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: Receiving...
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: Received.
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: received key
[04/25/12 10:54:06.520]rvNDS-to-IDM PT:: sending key
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:: Sending...
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:: Document sent.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:: using non-serialized XML connection method
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:: Waiting for receive...
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:: Received.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association state="migrate"></association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:Receiving DOM document from application.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association>{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:Applying input transformation policies.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Applying to add #1.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Rule selected.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Action: do-if().
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: Evaluating conditions.
[04/25/12 10:54:06.536]rvNDS-to-IDM PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Performing if actions.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Action: do-break().
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association>{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Applying to add #1.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Rule selected.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Applying rule 'AccountTracking - disregard if disabled'.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Action: do-break().
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association>{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Applying policy: %+C%14Cpub-itp-EmailOnFailedPasswordSub%-C.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Applying to add #1.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: (if-operation equal "status") = FALSE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Rule rejected.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: (if-operation equal "status") = FALSE.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT: Rule rejected.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add cached-time="20120425085406.251Z" class-name="Group" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" qualified-src-dn="O=idvault\OU=groups\OU=special\CN=testmulti" src-dn="\ACME-TREE\idvault\groups\special\testmulti" src-entry-id="33736" timestamp="0#0">
<association>{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</association>
<add-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1335343502#9" type="octet">PkDCkZzXDEqMRtekDnqNyQ==</value>
</add-attr>
</add>
</input>
</nds>
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:No schema mapping policies.
[04/25/12 10:54:06.551]rvNDS-to-IDM PT:Resolving association references.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:No event transformation policies.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:No associated objects.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:Applying publisher filter.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Filtered out <add-attr attr-name='GUID'>.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:Publisher processing add for \ACME-TREE\idvault\groups\special\testmulti.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:Applying object matching policies.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:Applying policy: %+C%14Cpub-mp-MatchingRule%-C.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Applying to add #1.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'new-Match SPECIAL GRUPS'.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: (if-class-name equal "Group") = TRUE.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: (if-src-dn in-subtree "idvault\groups\special\") = TRUE.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Rule selected.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Applying rule 'new-Match SPECIAL GRUPS'.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Action: do-if().
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Evaluating conditions.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: (if-dest-dn not-available) = TRUE.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Performing if actions.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Action: do-find-matching-object(scope="subtree",arg-dn("data\groups"),arg-match-attr("CN")).
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: arg-dn("data\groups")
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: token-text("data\groups")
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Arg Value: "data\groups".
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: arg-match-attr("CN")
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Query from policy
[04/25/12 10:54:06.567]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="Group" dest-dn="data\groups" scope="subtree">
<search-class class-name="Group"/>
<search-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Pumping XDS to eDirectory.
[04/25/12 10:54:06.567]rvNDS-to-IDM PT: Performing operation query for data\groups.
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Query from policy result
[04/25/12 10:54:06.614]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site3\CN=testmulti" src-dn="\CORP-TREE\data\groups\site3\testmulti" src-entry-id="32899"/>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site2\CN=testmulti" src-dn="\CORP-TREE\data\groups\site2\testmulti" src-entry-id="32898"/>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site1\CN=testmulti" src-dn="\CORP-TREE\data\groups\site1\testmulti" src-entry-id="32897"/>
<status event-id="0" level="success"></status>
</output>
</nds>
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Match found: src-dn='\CORP-TREE\data\groups\site3\testmulti'
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Match found: src-dn='\CORP-TREE\data\groups\site3\testmulti'
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Match found: src-dn='\CORP-TREE\data\groups\site3\testmulti'
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Action: do-if().
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Evaluating conditions.
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: (if-xml-attr 'dest-dn' match "\uFFFD") = TRUE.
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Performing if actions.
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Action: do-for-each(arg-node-set(token-query(class-name="Group",arg-match-attr("CN")))).
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: arg-node-set(token-query(class-name="Group",arg-match-attr("CN")))
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: token-query(class-name="Group",arg-match-attr("CN"))
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: arg-match-attr("CN")
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Query from policy
[04/25/12 10:54:06.614]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="Group" scope="subtree">
<search-class class-name="Group"/>
<search-attr attr-name="CN">
<value naming="true" timestamp="1335343502#8" type="string">testmulti</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Pumping XDS to eDirectory.
[04/25/12 10:54:06.614]rvNDS-to-IDM PT: Performing operation query for .
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Query from policy result
[04/25/12 10:54:06.629]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site3\CN=testmulti" src-dn="\CORP-TREE\data\groups\site3\testmulti" src-entry-id="32899"/>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site2\CN=testmulti" src-dn="\CORP-TREE\data\groups\site2\testmulti" src-entry-id="32898"/>
<instance class-name="Group" event-id="0" qualified-src-dn="O=data\OU=groups\OU=site1\CN=testmulti" src-dn="\CORP-TREE\data\groups\site1\testmulti" src-entry-id="32897"/>
<status event-id="0" level="success"></status>
</output>
</nds>
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Token Value: {<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site3\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site3\testmulti" @src-entry-id = "32899",<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site2\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site2\testmulti" @src-entry-id = "32898",<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site1\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site1\testmulti" @src-entry-id = "32897"}.
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Arg Value: {<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site3\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site3\testmulti" @src-entry-id = "32899",<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site2\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site2\testmulti" @src-entry-id = "32898",<instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site1\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site1\testmulti" @src-entry-id = "32897"}.
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Performing actions for local-variable(current-node) = <instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site3\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site3\testmulti" @src-entry-id = "32899".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Action: do-set-local-variable("destgrup",scope="policy",token-xpath("$current-node/@src-dn")).
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: arg-string(token-xpath("$current-node/@src-dn"))
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: token-xpath("$current-node/@src-dn")
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site3\testmulti".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site3\testmulti".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Action: do-add-association(direct="true",arg-dn(token-local-variable("destgrup")),arg-association(token-association())).
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: arg-association(token-association())
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: token-association()
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Token Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Arg Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: arg-dn(token-local-variable("destgrup"))
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: token-local-variable("destgrup")
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site3\testmulti".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site3\testmulti".
[04/25/12 10:54:06.629]rvNDS-to-IDM PT: Performing actions for local-variable(current-node) = <instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site2\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site2\testmulti" @src-entry-id = "32898".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Action: do-set-local-variable("destgrup",scope="policy",token-xpath("$current-node/@src-dn")).
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-string(token-xpath("$current-node/@src-dn"))
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-xpath("$current-node/@src-dn")
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site2\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site2\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Action: do-add-association(direct="true",arg-dn(token-local-variable("destgrup")),arg-association(token-association())).
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-association(token-association())
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-association()
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-dn(token-local-variable("destgrup"))
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-local-variable("destgrup")
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site2\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site2\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Performing actions for local-variable(current-node) = <instance> @class-name = "Group" @event-id = "0" @qualified-src-dn = "O=data\OU=groups\OU=site1\CN=testmulti" @src-dn = "\CORP-TREE\data\groups\site1\testmulti" @src-entry-id = "32897".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Action: do-set-local-variable("destgrup",scope="policy",token-xpath("$current-node/@src-dn")).
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-string(token-xpath("$current-node/@src-dn"))
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-xpath("$current-node/@src-dn")
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site1\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site1\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Action: do-add-association(direct="true",arg-dn(token-local-variable("destgrup")),arg-association(token-association())).
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-association(token-association())
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-association()
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: arg-dn(token-local-variable("destgrup"))
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: token-local-variable("destgrup")
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Token Value: "\CORP-TREE\data\groups\site1\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Arg Value: "\CORP-TREE\data\groups\site1\testmulti".
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Action: do-strip-xpath(".").
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Direct command from policy
[04/25/12 10:54:06.645]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add-association dest-dn="\CORP-TREE\data\groups\site3\testmulti" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc">{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</add-association>
</input>
</nds>
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Pumping XDS to eDirectory.
[04/25/12 10:54:06.645]rvNDS-to-IDM PT: Performing operation add-association for \CORP-TREE\data\groups\site3\testmulti.
[04/25/12 10:54:06.770]rvNDS-to-IDM PT:
DirXML Log Event -------------------
Driver: \CORP-TREE\system\driverset1\DrvNDS-to-IDM
Channel: Publisher
Object: \ACME-TREE\idvault\groups\special\testmulti
Status: Success
[04/25/12 10:54:06.770]rvNDS-to-IDM PT: Direct command from policy result
[04/25/12 10:54:06.770]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="success"><application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:06.770]rvNDS-to-IDM PT: Direct command from policy
[04/25/12 10:54:06.770]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add-association dest-dn="\CORP-TREE\data\groups\site2\testmulti" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc">{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</add-association>
</input>
</nds>
[04/25/12 10:54:06.770]rvNDS-to-IDM PT: Pumping XDS to eDirectory.
[04/25/12 10:54:06.770]rvNDS-to-IDM PT: Performing operation add-association for \CORP-TREE\data\groups\site2\testmulti.
[04/25/12 10:54:06.879]rvNDS-to-IDM PT:
DirXML Log Event -------------------
Driver: \CORP-TREE\system\driverset1\DrvNDS-to-IDM
Channel: Publisher
Object: \ACME-TREE\idvault\groups\special\testmulti
Status: Success
[04/25/12 10:54:06.879]rvNDS-to-IDM PT: Direct command from policy result
[04/25/12 10:54:06.879]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="success"><application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:06.879]rvNDS-to-IDM PT: Direct command from policy
[04/25/12 10:54:06.879]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add-association dest-dn="\CORP-TREE\data\groups\site1\testmulti" event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc">{3E40C291-9CD7-0c4a-8C46-D7A40E7A8DC9}</add-association>
</input>
</nds>
[04/25/12 10:54:06.879]rvNDS-to-IDM PT: Pumping XDS to eDirectory.
[04/25/12 10:54:06.879]rvNDS-to-IDM PT: Performing operation add-association for \CORP-TREE\data\groups\site1\testmulti.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:
DirXML Log Event -------------------
Driver: \CORP-TREE\system\driverset1\DrvNDS-to-IDM
Channel: Publisher
Object: \ACME-TREE\idvault\groups\special\testmulti
Status: Success
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: Direct command from policy result
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="success"><application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:
DirXML Log Event -------------------
Driver: \CORP-TREE\system\driverset1\DrvNDS-to-IDM
Channel: Publisher
Object: \ACME-TREE\idvault\groups\special\testmulti
Status: Warning
Message: Code(-8016) Operation vetoed by object matching policy.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Fixing up association references.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:No schema mapping policies.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Applying output transformation policies.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Applying policy: %+C%14Csub-otp-EmailOnFailedPasswordPub%-C.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: Applying to status #1.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: (if-operation equal "status") = TRUE.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: Rule rejected.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:06.988]rvNDS-to-IDM PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
[04/25/12 10:54:06.988]rvNDS-to-IDM PT: Applying to status #1.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Rule selected.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Action: do-if().
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Evaluating conditions.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = TRUE.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Performing if actions.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT: Action: do-break().
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:Policy returned:
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:: Sending...
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="4.0.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="idm4#20120425085406#99#1:af9eff3f-96cf-431c-bfe0-6e7217f6e0dc" level="warning">Code(-8016) Operation vetoed by object matching policy.<application>DirXML</application>
<module>DrvNDS-to-IDM</module>
<object-dn>\ACME-TREE\idvault\groups\special\testmulti</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:: Document sent.
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:: Reusing connection
[04/25/12 10:54:07.004]rvNDS-to-IDM PT:: Waiting for receive...

--------------------


--
jmriera
------------------------------------------------------------------------
jmriera's Profile: http://forums.novell.com/member.php?userid=10458
View this thread: http://forums.novell.com/showthread.php?t=455074