On 7/31/2012 8:56 AM, sunway2 wrote:
>
> Hi Geoffrey.
>
> So you are saying that this veto is happening because of there is no
> SSL configured in AD


No. Probably two different things. That would be a pub channel event
(i.e. AD won't send the password over an unsecure link) vs this, where a
user is being created who does not have a Universal Password set (per
your trace).


> [07/31/12 01:47:29.382]:TRACEAD ST:Applying policy:
> %+C%14CNOVLADDCFG-sub-cp-Users%-C.
> [07/31/12 01:47:29.382]:TRACEAD ST: Applying to add #1.
> [07/31/12 01:47:29.397]:TRACEAD ST: Evaluating selection criteria for
> rule 'Break if not a User'.
> [07/31/12 01:47:29.397]:TRACEAD ST: (if-class-name not-equal "User") =
> FALSE.
> [07/31/12 01:47:29.397]:TRACEAD ST: Rule rejected.
> [07/31/12 01:47:29.397]:TRACEAD ST: Evaluating selection criteria for
> rule 'Veto if nspmDistributionPassword is not available'.
> [07/31/12 01:47:29.397]:TRACEAD ST: Rule selected.
> [07/31/12 01:47:29.397]:TRACEAD ST: Applying rule 'Veto if
> nspmDistributionPassword is not available'.
> [07/31/12 01:47:29.397]:TRACEAD ST: Action:
> do-veto-if-op-attr-not-available("nspmDistributionPassword").
> [07/31/12 01:47:29.397]:TRACEAD ST:Policy returned:
> [07/31/12 01:47:29.397]:TRACEAD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input/>
> </nds>
> [07/31/12 01:47:29.397]:TRACEAD ST:Applying policy:
> %+C%14CNOVLADDCFG-sub-cp-Groups%-C.
> [07/31/12 01:47:29.397]:TRACEAD ST:Policy returned:
> [07/31/12 01:47:29.397]:TRACEAD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input/>
> </nds>
> [07/31/12 01:47:29.397]:TRACEAD ST:Applying policy:
> %+C%14CNOVLADENTEX-sub-cp-ExchMailboxPolicy%-C.
> [07/31/12 01:47:29.397]:TRACEAD ST:Policy returned:
> [07/31/12 01:47:29.397]:TRACEAD ST:
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input/>
> </nds>
> [07/31/12 01:47:29.397]:TRACEAD ST:Processing returned document.
> [07/31/12 01:47:29.397]:TRACEAD ST:Processing operation <status> for .
> [07/31/12 01:47:29.397]:TRACEAD ST:
> DirXML Log Event -------------------
> Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory
> Driver
> Channel: Subscriber
> Object: \xxxxxIDM\xxxxx\data\users\testuser50
> Status: Warning
> Message: Code(-8017) Operation vetoed by object creation policy.
> [07/31/12 01:47:29.397]:TRACEAD ST:End transaction.
>
>