rohit_everett;230676 Wrote:
> -----------------------
>
>
> I guess you got me wrong there. Sorry if I was ambiguous.
> I am moving an object from one OU to another !!
> I thought it was simple. Does not look like so !!


It's me who needs to apologies, I read your post too quickly and thought
you meant moving an OU.
Moving other objects (like a user) is definitely possible. You don't
have the same limitations as I described for moving OUs.

We need to see a bit more of the trace (for example, the level 3 trace
on the driver shim side). What you have posted looks OK to me.


You say you tried using the association (which is the correct approach
as far as I understand it). Did your rule look something like this?

<rule>
<description>Handle moves</description>
<comment xml:space="preserve">Handle OU movement in eDir in case a
user object moves in IDVault</comment>
<conditions>
<and>
<if-class-name mode="nocase" op="equal">User</if-class-name>
<if-operation mode="case" op="equal">move</if-operation>
</and>
</conditions>
<actions>
<do-move-dest-object when="after">
<arg-association>
<token-map dest="DN" src="City"
table="\[root]\system\driverset1\eDir_SP5_Driver\City-OU">
<token-attr name="city"/>
</token-map>
</arg-association>
</do-move-dest-object>
<do-veto/>
</actions>
</rule>


--
alexmchugh
------------------------------------------------------------------------
alexmchugh's Profile: https://forums.netiq.com/member.php?userid=461
View this thread: https://forums.netiq.com/showthread.php?t=48022