IDM 4.0.2 Patch C

I've created a DAL entity (for roles) - with 4 attributes (restricted to only return roles of a specific category) and a query that uses this entity.

This works just fine in my test environment but when I copied (via designer) the config to production - I don't get any results populated in my picklist control within a PRD (PRD also copied from test to prod and works in test)
There are definitely roles with this category in the role catalog.

If I remove the restriction to only return roles of a specific category, I get results populated in my picklist - but the CN is used rather than the nrfLocalizedDescrs as specified in the PRD.
Everything is copied directly from test (where it all works).

Bumping up the logging on com.novell.srvprv.impl.vdata.model confirms that the LDAP filter is correct, but nothing gets returned.

Running the same filter in a LDAP browser works just fine.

Any ideas??

ECMAScript used to populate picklist

IDVault.globalQuery("internExchangeOU", "getAllDepartmentRoles");

DAL entity

<?xml version="1.0" encoding="UTF-8"?><driver-configuration config-type="app-config" dn="UserApplication.IDM-DriverSet.Tjenester.IDM" driver-set-dn="IDM-DriverSet.Tjenester.IDM" name="UserApplication">
<children>
<provisioning>
<ds-object ds-object-class="srvprvAppConfig" ds-object-name="AppConfig">
<ds-attribute ds-attr-name="Version">
<ds-value>2.2</ds-value>
</ds-attribute>
<ds-object ds-object-class="nrfAuthTypes" ds-object-name="AuthTypes">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfUIConfig" ds-object-name="UIConfig">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvAppDefs" ds-object-name="AppDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvDirectoryModel" ds-object-name="DirectoryModel">
<ds-attributes/>
<ds-object ds-object-class="srvprvDirectoryModel" ds-object-name="ChoiceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvChoiceDefs" ds-object-name="ChoiceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvEntityDefs" ds-object-name="EntityDefs">
<ds-attributes/>
<ds-object ds-object-class="srvprvEntity" ds-object-name="iamtDepartmentRole">
<ds-attributes>
<ds-attribute ds-attr-name="Description">
<ds-value>Department Role</ds-value>
</ds-attribute>
<ds-attribute ds-attr-name="srvprvEntityType">
<ds-value>P</ds-value>
</ds-attribute>
<ds-attribute ds-attr-name="XMLData">
<ds-value><![CDATA[PGVudGl0eS1kZWZpbml0aW9uIHhtbG5zOnhzaT0iaHR0cDovL3 d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiCiAg ICAgICAgeHNpOm5vTmFtZXNwYWNlU2NoZW1hTG9jYXRpb249Ii 4uLy4uLy4uLy4uLy4uLy4uLy4uL3htbC12YWxpZGF0aW9uL2Nv bmYvc2NoZW1hL0RpcmVjdG9yeU1vZGVsWG1sRGF0YTNfNV8wLn hzZCI+CiAgICA8ZW50aXR5CiAgICAgICAgYXV0by1xdWVyeT0i ZmFsc2UiIGNyZWF0YWJsZT0idHJ1ZSIgZWRpdGFibGU9InRydW UiCiAgICAgICAgcHJvdGVjdGVkPSJmYWxzZSIgcmVtb3ZhYmxl PSJ0cnVlIiBzeXN0ZW09ImZhbHNlIgogICAgICAgICAgICB2aW V3YWJsZT0idHJ1ZSI+CiAgICAgICAgPGRpc3BsYXkKICAgICAg ICAgICAgeG1sOmxhbmc9ImVuIj4KICAgICAgICAgICAgPGxhYm VsPkRlcGFydG1lbnQgUm9sZTwvbGFiZWw+CiAgICAgICAgPC9k aXNwbGF5PjxzZWFyY2gtcm9vdD4lbnJmLXJvbGUtcm9vdCU8L3 NlYXJjaC1yb290PgogICAgICAgIDxvYmplY3QtY2xhc3MKICAg ICAgICAgICAgYXV4aWxpYXJ5PSJmYWxzZSIKICAgICAgICAgIC Agc2VhcmNoPSJ0cnVlIj4KICAgICAgICAgICAgPGxkYXAtbmFt ZT5ucmZSb2xlPC9sZGFwLW5hbWU+CiAgICAgICAgICAgIDxuZH MtbmFtZT5ucmZSb2xlPC9uZHMtbmFtZT4KICAgICAgICA8L29i amVjdC1jbGFzcz4KICAgICAgICA8ZmlsdGVyCiAgICAgICAgIC AgICAgICBsb2dpY2FsLW9wPSJhbmQiPgogICAgICAgICAgICA8 Y29uZGl0aW9uLWdyb3VwCiAgICAgICAgICAgIGxvZ2ljYWwtb3 A9Im9yIj4KICAgICAgICAgICAgICAgIDxjb25kaXRpb24tcm93 PgogICAgICAgICAgICAgICAgICAgIDxhdHRyaWJ1dGU+bnJmUm 9sZUNhdGVnb3J5S2V5PC9hdHRyaWJ1dGU+CiAgICAgICAgICAg ICAgICAgICAgPHJlbGF0aW9uYWwtb3A+ZXF1YWxzPC9yZWxhdG lvbmFsLW9wPgogICAgICAgICAgICAgICAgICAgIDx2YWx1ZT5k ZXBhcnRtZW50PC92YWx1ZT4KICAgICAgICAgICAgICAgIDwvY2 9uZGl0aW9uLXJvdz4KICAgICAgICAgICAgPC9jb25kaXRpb24t Z3JvdXA+CiAgICAgICAgPC9maWx0ZXI+CiAgICA8L2VudGl0eT 4KICAgIDxhdHRyaWJ1dGVzPgogICAgICAgIDxhdHRyaWJ1dGUK ICAgICAgICAgICAgZWRpdGFibGU9InRydWUiIGVuYWJsZWQ9In RydWUiIGhpZGVhYmxlPSJmYWxzZSIKICAgICAgICAgICAgbXVs dGl2YWx1ZT0idHJ1ZSIgcHJvdGVjdGVkPSJmYWxzZSIgcmVhZG FibGU9InRydWUiCiAgICAgICAgICAgIHJlcXVpcmVkPSJmYWxz ZSIgc2VhcmNoYWJsZT0idHJ1ZSIKICAgICAgICAgICAgICAgIH ZpZXdhYmxlPSJ0cnVlIj4KICAgICAgICAgICAgPGtleT5ucmZS b2xlQ2F0ZWdvcnlLZXk8L2tleT4KICAgICAgICAgICAgPGxkYX AtbmFtZT5ucmZSb2xlQ2F0ZWdvcnlLZXk8L2xkYXAtbmFtZT4K ICAgICAgICAgICAgPG5kcy1uYW1lPm5yZlJvbGVDYXRlZ29yeU tleTwvbmRzLW5hbWU+CiAgICAgICAgICAgIDxkaXNwbGF5CiAg ICAgICAgICAgIHhtbDpsYW5nPSJlbiI+CiAgICAgICAgICAgIC AgICA8bGFiZWw+bnJmUm9sZUNhdGVnb3J5S2V5PC9sYWJlbD4K ICAgICAgICAgICAgPC9kaXNwbGF5PgogICAgICAgICAgICA8dH lwZT5TdHJpbmc8L3R5cGU+CiAgICAgICAgPC9hdHRyaWJ1dGU+ CiAgICAgICAgPGF0dHJpYnV0ZQogICAgICAgICAgICBlZGl0YW JsZT0idHJ1ZSIgZW5hYmxlZD0idHJ1ZSIgaGlkZWFibGU9ImZh bHNlIgogICAgICAgICAgICBtdWx0aXZhbHVlPSJmYWxzZSIgcH JvdGVjdGVkPSJmYWxzZSIgcmVhZGFibGU9InRydWUiCiAgICAg ICAgICAgIHJlcXVpcmVkPSJ0cnVlIiBzZWFyY2hhYmxlPSJ0cn VlIgogICAgICAgICAgICAgICAgdmlld2FibGU9InRydWUiPgog ICAgICAgICAgICA8a2V5Pm5yZlJvbGVMZXZlbDwva2V5PgogIC AgICAgICAgICA8bGRhcC1uYW1lPm5yZlJvbGVMZXZlbDwvbGRh cC1uYW1lPgogICAgICAgICAgICA8bmRzLW5hbWU+bnJmUm9sZU xldmVsPC9uZHMtbmFtZT4KICAgICAgICAgICAgPGRpc3BsYXkK ICAgICAgICAgICAgeG1sOmxhbmc9ImVuIj4KICAgICAgICAgIC AgICAgIDxsYWJlbD5ucmZSb2xlTGV2ZWw8L2xhYmVsPgogICAg ICAgICAgICA8L2Rpc3BsYXk+CiAgICAgICAgICAgIDx0eXBlPk ludGVnZXI8L3R5cGU+CiAgICAgICAgPC9hdHRyaWJ1dGU+CiAg ICAgICAgPGF0dHJpYnV0ZQogICAgICAgICAgICBlZGl0YWJsZT 0idHJ1ZSIgZW5hYmxlZD0idHJ1ZSIgaGlkZWFibGU9ImZhbHNl IgogICAgICAgICAgICBtdWx0aXZhbHVlPSJmYWxzZSIgcHJvdG VjdGVkPSJmYWxzZSIgcmVhZGFibGU9InRydWUiCiAgICAgICAg ICAgIHJlcXVpcmVkPSJmYWxzZSIgc2VhcmNoYWJsZT0idHJ1ZS IKICAgICAgICAgICAgICAgIHZpZXdhYmxlPSJ0cnVlIj4KICAg ICAgICAgICAgPGtleT5ucmZMb2NhbGl6ZWREZXNjcnM8L2tleT 4KICAgICAgICAgICAgPGxkYXAtbmFtZT5ucmZMb2NhbGl6ZWRE ZXNjcnM8L2xkYXAtbmFtZT4KICAgICAgICAgICAgPG5kcy1uYW 1lPm5yZkxvY2FsaXplZERlc2NyczwvbmRzLW5hbWU+CiAgICAg ICAgICAgIDxkaXNwbGF5CiAgICAgICAgICAgIHhtbDpsYW5nPS JlbiI+CiAgICAgICAgICAgICAgICA8bGFiZWw+bnJmTG9jYWxp emVkRGVzY3JzPC9sYWJlbD4KICAgICAgICAgICAgPC9kaXNwbG F5Pjx0eXBlPkxvY2FsaXplZFN0cmluZzwvdHlwZT4KICAgICAg ICA8L2F0dHJpYnV0ZT4KICAgICAgICA8YXR0cmlidXRlCiAgIC AgICAgICAgIGVkaXRhYmxlPSJ0cnVlIiBlbmFibGVkPSJ0cnVl IiBoaWRlYWJsZT0iZmFsc2UiCiAgICAgICAgICAgIG11bHRpdm FsdWU9ImZhbHNlIiBwcm90ZWN0ZWQ9ImZhbHNlIiByZWFkYWJs ZT0idHJ1ZSIKICAgICAgICAgICAgcmVxdWlyZWQ9ImZhbHNlIi BzZWFyY2hhYmxlPSJ0cnVlIgogICAgICAgICAgICAgICAgdmll d2FibGU9InRydWUiPgogICAgICAgICAgICA8a2V5Pm5yZkxvY2 FsaXplZE5hbWVzPC9rZXk+CiAgICAgICAgICAgIDxsZGFwLW5h bWU+bnJmTG9jYWxpemVkTmFtZXM8L2xkYXAtbmFtZT4KICAgIC AgICAgICAgPG5kcy1uYW1lPm5yZkxvY2FsaXplZE5hbWVzPC9u ZHMtbmFtZT4KICAgICAgICAgICAgPGRpc3BsYXkgeG1sOmxhbm c9ImVuIj4KICAgICAgICAgICAgICAgIDxsYWJlbD5ucmZMb2Nh bGl6ZWROYW1lczwvbGFiZWw+CiAgICAgICAgICAgIDwvZGlzcG xheT4KICAgICAgICAgICAgPHR5cGU+TG9jYWxpemVkU3RyaW5n PC90eXBlPgogICAgICAgIDwvYXR0cmlidXRlPgogICAgPC9hdH RyaWJ1dGVzPgo8L2VudGl0eS1kZWZpbml0aW9uPgo=]]></ds-value>
</ds-attribute>
</ds-attributes>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvQueryDefs" ds-object-name="QueryDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvRelationshipDefs" ds-object-name="RelationshipDefs">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvRequestDefs" ds-object-name="RequestDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfConfig" ds-object-name="RoleConfig">
<ds-attributes/>
<ds-object ds-object-class="nrfAttestations" ds-object-name="Attestations">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfReportDefs" ds-object-name="ReportDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfResourceDefs" ds-object-name="ResourceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="RoleDefs">
<ds-attributes/>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level10">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level20">
<ds-attributes/>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="System">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level30">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="nrfResourceAssociations" ds-object-name="ResourceAssociations">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfResourceRequests" ds-object-name="ResourceRequests">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfSODDefs" ds-object-name="SoDDefs">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvTeamDefs" ds-object-name="TeamDefs">
<ds-attributes/>
</ds-object>
</ds-object>
</provisioning>
</children></driver-configuration>

DAL Query

<?xml version="1.0" encoding="UTF-8"?><driver-configuration config-type="app-config" dn="UserApplication.IDM-DriverSet.Tjenester.IDM" driver-set-dn="IDM-DriverSet.Tjenester.IDM" name="UserApplication">
<children>
<provisioning>
<ds-object ds-object-class="srvprvAppConfig" ds-object-name="AppConfig">
<ds-attribute ds-attr-name="Version">
<ds-value>2.2</ds-value>
</ds-attribute>
<ds-object ds-object-class="nrfAuthTypes" ds-object-name="AuthTypes">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfUIConfig" ds-object-name="UIConfig">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvAppDefs" ds-object-name="AppDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvDirectoryModel" ds-object-name="DirectoryModel">
<ds-attributes/>
<ds-object ds-object-class="srvprvDirectoryModel" ds-object-name="ChoiceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvChoiceDefs" ds-object-name="ChoiceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvEntityDefs" ds-object-name="EntityDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="srvprvQueryDefs" ds-object-name="QueryDefs">
<ds-attributes/>
<ds-object ds-object-class="srvprvQuery" ds-object-name="getAllDepartmentRoles">
<ds-attributes>
<ds-attribute ds-attr-name="Description">
<ds-value>Get All Department Roles</ds-value>
</ds-attribute>
<ds-attribute ds-attr-name="XMLData">
<ds-value><![CDATA[PHF1ZXJ5LWRlZmluaXRpb24geG1sbnM6eHNpPSJodHRwOi8vd3 d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIKICAg ICAgICB4c2k6bm9OYW1lc3BhY2VTY2hlbWFMb2NhdGlvbj0iLi 4vLi4vLi4vLi4vLi4vLi4vLi4veG1sLXZhbGlkYXRpb24vY29u Zi9zY2hlbWEvRGlyZWN0b3J5TW9kZWxYbWxEYXRhM181XzAueH NkIj48ZW50aXR5PmlhbXREZXBhcnRtZW50Um9sZTwvZW50aXR5 PgogICAgPGRpc3BsYXkgeG1sOmxhbmc9ImVuIj4KICAgICAgIC A8bGFiZWw+R2V0IEFsbCBEZXBhcnRtZW50IFJvbGVzPC9sYWJl bD4KICAgIDwvZGlzcGxheT48L3F1ZXJ5LWRlZmluaXRpb24+Cg ==]]></ds-value>
</ds-attribute>
</ds-attributes>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvRelationshipDefs" ds-object-name="RelationshipDefs">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvRequestDefs" ds-object-name="RequestDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfConfig" ds-object-name="RoleConfig">
<ds-attributes/>
<ds-object ds-object-class="nrfAttestations" ds-object-name="Attestations">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfReportDefs" ds-object-name="ReportDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfResourceDefs" ds-object-name="ResourceDefs">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="RoleDefs">
<ds-attributes/>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level10">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level20">
<ds-attributes/>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="System">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="nrfRoleDefs" ds-object-name="Level30">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="nrfResourceAssociations" ds-object-name="ResourceAssociations">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfResourceRequests" ds-object-name="ResourceRequests">
<ds-attributes/>
</ds-object>
<ds-object ds-object-class="nrfSODDefs" ds-object-name="SoDDefs">
<ds-attributes/>
</ds-object>
</ds-object>
<ds-object ds-object-class="srvprvTeamDefs" ds-object-name="TeamDefs">
<ds-attributes/>
</ds-object>
</ds-object>
</provisioning>
</children></driver-configuration>


--
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...