We are moving to GW 2014r2 from GW 8 and introducing IDM for the
synchronizing (ie for the LDAP DN) . Any new accounts that are created
are updating in GW fine; however, any accounts that are existing in GW
prior to the upgrade will not update.

The trace 3 log tells me

Code(-8015) Operation vetoed by filter.<operation-data
AccountTracking-AppAccountStatus="-"
AccountTracking-IdvAccountStatus="-"

I have been unable to find the filter that is actually causing this
veto.

I've tried "migrate from identity vault", but it just gives the same
error.

I've even tried removing the association from the GW account, migrating
and re-associating, but I still get the same error.

My servers are
SLES 11 SP3
OES 11 SP2

These trace 3 logs only contain the processing of one account with the
error.

Remote Loader - https://seafile.tbrhsc.net/f/00d91f9132/
IDM - https://seafile.tbrhsc.net/f/f07319ee2e/

thanks
Chris


--
grahamch
------------------------------------------------------------------------
grahamch's Profile: https://forums.netiq.com/member.php?userid=1291
View this thread: https://forums.netiq.com/showthread.php?t=55858