Hi

Apologies, I know this is a simple one. Yet could someone tell me how to
include a user container that is being vetoed from the eDirectory side?
Ie Caseflow is being vetoed below and I would like to include it.

This is the trace log:

-*<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="FSBGS1#20150728132653#1#1"
qualified-src-dn="O=KASK\OU=CASEFLOW\OU=USERS\CN=PSAGAN"
src-dn="\KASK_TREE\KASK\CASEFLOW\USERS\PSAGAN" src-entry-id="47070"
timestamp="1438090018#1">
<add-attr attr-name="uniqueID">
<value timestamp="1438090013#6" type="string">PSAGAN</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1438090013#18"
type="octet">gMxNTyw15RGrxwAMKc81BQ==</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1438090013#17" type="string">PSAGAN</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1438090013#3" type="string">SAGAN</value>
</add-attr>
<add-attr attr-name="Language">
<value timestamp="1438090013#2" type="structured">
<component name="string">ENGLISH</component>
</value>
</add-attr>
</add>
</input>
</nds>
[07/28/15 14:26:58.428]: edir_id ST: Applying policy: %+C%14CScope
Users%-C.
[07/28/15 14:26:58.428]: edir_id ST: Applying to add #1.
[07/28/15 14:26:58.428]: edir_id ST: Evaluating selection criteria
for rule 'Scope OUs'.
[07/28/15 14:26:58.428]: edir_id ST: (if-class-name equal "User")
= TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\BIR\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\NOT\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\HO\SERVICES") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\THE\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\PAD\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\IT\SERVICES") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\NEW\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\MAN\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\LON\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\LIV\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\LEE\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\ICT\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\HO\USERS") = TRUE.
[07/28/15 14:26:58.429]: edir_id ST: (if-src-dn not-in-subtree
"KASK\GLA\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: (if-src-dn not-in-subtree
"KASK\FLE\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: (if-src-dn not-in-subtree
"KASK\CAR\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: (if-src-dn not-in-subtree
"KASK\CAC\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: (if-src-dn not-in-subtree
"KASK\BRI\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: (if-src-dn not-in-subtree
"KASK\BLN\USERS") = TRUE.
[07/28/15 14:26:58.430]: edir_id ST: Rule selected.
[07/28/15 14:26:58.430]: edir_id ST: Applying rule 'Scope OUs'.
[07/28/15 14:26:58.430]: edir_id ST: Action: do-veto().
[07/28/15 14:26:58.430]: edir_id ST: Policy returned:
[07/28/15 14:26:58.430]: edir_id ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[07/28/15 14:26:58.430]: edir_id ST: End transaction.
[07/28/15 14:27:07.300]: edir_id ST: Start transaction.
[07/28/15 14:27:07.301]: edir_id ST: Processing events for transaction.
[07/28/15 14:27:07.305]: edir_id ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="FSBGS1#20150728132702#1#6"
qualified-src-dn="O=KASK\OU=CASEFLOW\OU=USERS\CN=PSAGAN"
src-dn="\KASK_TREE\KASK\CASEFLOW\USERS\PSAGAN" src-entry-id="47070"
timestamp="1438090022#6">
<modify-attr attr-name="Telephone Number">
<add-value>
<value timestamp="1438090021#27" type="teleNumber">020
7210</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Login Grace Limit">
<add-value>
<value timestamp="1438090021#62" type="int">3</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Group Membership">
<add-value>
<value timestamp="1438090021#127"
type="dn">\KASK_TREE\KASK\HO\USERS\EVERYONE</value>
</add-value>
<add-value>
<value timestamp="1438090021#132"
type="dn">\KASK_TREE\KASK\UTILITIES\IDM\LIMITEDacc ess</value>
</add-value>
</modify-attr>
<modify-attr attr-name="L">
<add-value>
<value timestamp="1438090021#22" type="string">KASK
National</value>
</add-value>
</modify-attr>
<modify-attr attr-name="EMail Address">
<add-value>
<value timestamp="1438090021#117" type="structured">
<component name="eMailType">7</component>
<component
name="eMailAddr">HOTEMPLATE@KASK_Domain.Head_Off_P O</component>
</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Login Disabled">
<add-value>
<value timestamp="1438090021#97" type="state">false</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Facsimile Telephone Number">
<add-value>
<value timestamp="1438090022#6" type="structured">
<component name="faxNumber">020 7210</component>
<component name="faxBitCount">0</component>
<component name="faxParameters"/>
</value>
</add-value>
</modify-attr>
<modify-attr attr-name="SA">
<add-value>
<value timestamp="1438090021#77" type="string">22nd floor
Euston Tower 286 Euston Road London </value>
</add-value>
</modify-attr>
<modify-attr attr-name="Login Grace Remaining">
<remove-all-values/>
<add-value>
<value type="counter">3</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Password Required">
<add-value>
<value timestamp="1438090021#72" type="state">true</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Postal Code">
<add-value>
<value timestamp="1438090021#52" type="string">NW1
3JJ</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Postal Address">
<add-value>
<value timestamp="1438090021#122" type="structured">
<component name="string"/>
<component name="string"/>
<component name="string"/>
<component name="string"/>
<component name="string"/>
<component name="string"/>
</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Password Expiration Time">
<add-value>
<value timestamp="1438090021#37"
type="time">936172800</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Physical Delivery Office Name">
<add-value>
<value timestamp="1438090021#47" type="string">LONDON</value>
</add-value>
</modify-attr>
<modify-attr attr-name="Password Minimum Length">
<add-value>
<value timestamp="1438090021#57" type="int">6</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
[07/28/15 14:27:07.308]: edir_id ST: Applying event transformation
policies.
[07/28/15 14:27:07.308]: edir_id ST: Applying policy: %+C%14CScope
Groups%-C.
[07/28/15 14:27:07.308]: edir_id ST: Applying to modify #1.
[07/28/15 14:27:07.308]: edir_id ST: Evaluating selection criteria
for rule 'Scope OUs'.
[07/28/15 14:27:07.308]: edir_id ST: (if-class-name equal "Group")
= FALSE.
[07/28/15 14:27:07.308]: edir_id ST: Rule rejected.
[07/28/15 14:27:07.308]: edir_id ST: Policy returned:
[07/28/15 14:27:07.309]: edir_id ST:
<nds dtdversion="3.0" ndsversion="8.x">
<CUT>
*-

Where exactly can I check what OU's are being filtered and include it?

Many thanks in advance,
Anthony


--
akeaveney
------------------------------------------------------------------------
akeaveney's Profile: https://forums.netiq.com/member.php?userid=9256
View this thread: https://forums.netiq.com/showthread.php?t=53936