Recently I have installed a new IDM server (4.5.3). The accounts on the
old server (4.0.2) reside in de OU's data\guests\gast and
data\guests\gen.
New server: data\users\gast resp. data\users\gen.
Ik can easily move the users from the old server to the new with ICE and
re-route the SOAP messages to the new server. Those messages origin from
an external
party. In order not te be dependant on them, I have DIRXML-ed something
in Event Transformation in the SOAP driver:

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE policy PUBLIC
"policy-builder-dtd"
"D:\netiq\idm\apps\Designer\plugins\com.novell.idm .policybuilder_4.0.0.201601220536\DTD\dirxmlscript 4.5.3.dtd"><policy>
<rule>
<description>Source DN data\guests\... --> Destination DN
data\users\...</description>
<conditions>
<and/>
</conditions>
<actions>
<do-if>
<arg-conditions>
<and>
<if-src-dn op="in-subtree">data\guests\gast</if-src-dn>
</and>
</arg-conditions>
<arg-actions>
<do-set-op-dest-dn>
<arg-dn>
<token-text xml:space="preserve">data\users\gast\</token-text>
<token-src-name/>
</arg-dn>
</do-set-op-dest-dn>
</arg-actions>
<arg-actions>
<do-if>
<arg-conditions>
<and>
<if-src-dn op="in-subtree">data\guests\gen</if-src-dn>
</and>
</arg-conditions>
<arg-actions>
<do-set-op-dest-dn>
<arg-dn>
<token-text xml:space="preserve">data\users\gen\</token-text>
<token-src-name/>
</arg-dn>
</do-set-op-dest-dn>
</arg-actions>
<arg-actions/>
</do-if>
</arg-actions>
</do-if>
</actions>
</rule>
</policy>


It works fine on a Modify but on a Delete, I get "Operation vetoed on on
unassociated object" in my SOAP client. Partial Trace below.
It seems that Source DN and Source Name are not available in case of a
Delete. How do I work around this? Thanks in advance.


MODIFY (executed correctly):

[06/22/16 15:44:03.881]:iWelcome SOAP PT:Applying policy:
%+C%14CNOVLADDCFG-pub-etp-HG_HandleExceptions%-C.
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Applying to modify #1.
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Evaluating selection
criteria for rule 'Source DN data\guests\... --> Destination DN
data\users\...'.
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Rule selected.
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Applying rule 'Source DN
data\guests\... --> Destination DN data\users\...'.
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Action: do-if().
[06/22/16 15:44:03.881]:iWelcome SOAP PT: Evaluating conditions.
[06/22/16 15:44:03.897]:iWelcome SOAP PT: (if-src-dn in-subtree
"data\guests\gast") = TRUE.
[06/22/16 15:44:03.897]:iWelcome SOAP PT: Performing if actions.
[06/22/16 15:44:03.897]:iWelcome SOAP PT: Action:
do-set-op-dest-dn(arg-dn("data\users\gast\"+token-src-name())).
[06/22/16 15:44:03.897]:iWelcome SOAP PT:
arg-dn("data\users\gast\"+token-src-name())
[06/22/16 15:44:03.897]:iWelcome SOAP PT:
token-text("data\users\gast\")
[06/22/16 15:44:03.897]:iWelcome SOAP PT: token-src-name()
[06/22/16 15:44:03.897]:iWelcome SOAP PT: Token Value:
"p.de.boskabouter@oehoeboeroe.nl".
[06/22/16 15:44:03.897]:iWelcome SOAP PT: Arg Value:
"data\users\gast\p.de.boskabouter@oehoeboeroe. nl".
[06/22/16 15:44:03.897]:iWelcome SOAP PT:Policy returned:


DELETE (Destination DN not changed so the SOAP client gets a "Operation
vetoed on on unassociated object"):

[06/22/16 15:35:05.647]:iWelcome SOAP PT:Applying policy:
%+C%14CNOVLADDCFG-pub-etp-HG_HandleExceptions%-C.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Applying to delete #1.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Evaluating selection
criteria for rule 'Source DN data\guests\... --> Destination DN
data\users\...'.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Rule selected.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Applying rule 'Source DN
data\guests\... --> Destination DN data\users\...'.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Action: do-if().
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Evaluating conditions.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: (if-src-dn in-subtree
"data\guests\gast") = FALSE.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Performing else
actions.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Action: do-if().
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Evaluating
conditions.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: (if-src-dn
in-subtree "data\guests\gen") = FALSE.
[06/22/16 15:35:05.647]:iWelcome SOAP PT: Performing else
actions.
[06/22/16 15:35:05.647]:iWelcome SOAP PT:Policy returned:


--
joer999
------------------------------------------------------------------------
joer999's Profile: https://forums.netiq.com/member.php?userid=6162
View this thread: https://forums.netiq.com/showthread.php?t=56087