IDM 4.5.4, eDir 8.8.8.8, SLES 12.1

After upgrading from IDM 4.02 to 4.54 the move user function in the AD
driver stopped working. Specifically the driver uses a search
destQueryProcessor for finding an OU based on a department acronym and
should return the dynamic-dest-dn-value local variable (see below
trace snip). This worked prior to upgrade.
Any ideas why this function would stop working?


14:29:51 7A595700 Drvrs: PBCGOV ST: (if-attr 'PBCisPBCGOVUser' not-equal
"FALSE") = TRUE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule selected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying rule 'Determine Destination
Location in Move User'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Action: do-trace-message("###
Processing Move User Events For Transfers NOT Related to Deprovision or
Deactivate Events ###").
14:29:51 7A595700 Drvrs: PBCGOV ST: arg-string("### Processing Move User
Events For Transfers NOT Related to Deprovision or Deactivate Events
###")
14:29:51 7A595700 Drvrs: PBCGOV ST: token-text("### Processing Move User
Events For Transfers NOT Related to Deprovision or Deactivate Events
###")
14:29:51 7A595700 Drvrs: PBCGOV ST: Arg Value: "### Processing Move User
Events For Transfers NOT Related to Deprovision or Deactivate Events
###".
14:29:51 7A595700 Drvrs: PBCGOV ST:### Processing Move User Events For
Transfers NOT Related to Deprovision or Deactivate Events ###
14:29:51 7A595700 Drvrs: PBCGOV ST: Action:
do-set-local-variable("short-ou-value",scope="policy",token-parse-dn(length="1",start="-2",token-src-dn())).
14:29:51 7A595700 Drvrs: PBCGOV ST:
arg-string(token-parse-dn(length="1",start="-2",token-src-dn()))
14:29:51 7A595700 Drvrs: PBCGOV ST:
token-parse-dn(length="1",start="-2",token-src-dn())
14:29:51 7A595700 Drvrs: PBCGOV ST:
token-parse-dn(length="1",start="-2",token-src-dn())
14:29:51 7A595700 Drvrs: PBCGOV ST: token-src-dn()
14:29:51 7A595700 Drvrs: PBCGOV ST: Token Value:
"\DEVIV\PBC\USERS\ISS\AReNameOK".
14:29:51 7A595700 Drvrs: PBCGOV ST: Arg Value:
"\DEVIV\PBC\USERS\ISS\AReNameOK".
14:29:51 7A595700 Drvrs: PBCGOV ST: Token Value: "ISS".
14:29:51 7A595700 Drvrs: PBCGOV ST: Arg Value: "ISS".
14:29:51 7A595700 Drvrs: PBCGOV ST: Action:
do-set-local-variable("dynamic-dest-dn-value",scope="policy",token-xpath("query:search($destQueryProcessor,
"subtree","", "OU=Enterprise,DC=iss,DC=lcl", "Organizational Unit",
"OU", $short-ou-value, "")//@src-dn")).
14:29:51 7A595700 Drvrs: PBCGOV ST:
arg-string(token-xpath("query:search($destQueryProcessor, "subtree","",
"OU=Enterprise,DC=iss,DC=lcl", "Organizational Unit", "OU",
$short-ou-value, "")//@src-dn"))
14:29:51 7A595700 Drvrs: PBCGOV ST:
token-xpath("query:search($destQueryProcessor, "subtree","",
"OU=Enterprise,DC=iss,DC=lcl", "Organizational Unit", "OU",
$short-ou-value, "")//@src-dn")
14:29:51 7A595700 Drvrs: PBCGOV ST: Query from policy
14:29:51 7A595700 Drvrs: PBCGOV ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.4.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="Organizational Unit"
dest-dn="OU=Enterprise,DC=iss,DC=lcl" scope="subtree">
<search-class class-name="Organizational Unit"/>
<search-attr attr-name="OU">
<value>ISS</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
14:29:51 7A595700 Drvrs: PBCGOV ST: Fixing up association references.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying schema mapping policies to
output.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying policy: SchemaMapping.
14:29:51 7A595700 Drvrs: PBCGOV ST: Mapping attr-name 'OU' to 'ou'.
14:29:51 7A595700 Drvrs: PBCGOV ST: No mapping for class-name
'Organizational Unit'.
14:29:51 7A595700 Drvrs: PBCGOV ST: No mapping for class-name
'Organizational Unit'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying output transformation
policies.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying policy: OutputTransform.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying to query #1.
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'Street Address: Convert LF to CR-LF'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule selected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying rule 'Street Address:
Convert LF to CR-LF'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'logonHours: Convert to Active Directory form'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule selected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying rule 'logonHours: Convert
to Active Directory form'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'accountExpires: Convert to Active Directory form'.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-src-attr 'Login Expiration Time'
available) = FALSE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule rejected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'lockoutTime: Convert to Active Directory form'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule selected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying rule 'lockoutTime: Convert
to Active Directory form'.
14:29:51 7A595700 Drvrs: PBCGOV ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'Add: User - convert multi-valued Telephone to single value'.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-operation equal "add") = FALSE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule rejected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'update Active Directory logon name'.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-xpath true "self::status[@level
= 'success']/operation-data/windows-2000-logon-name") = FALSE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule rejected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Policy returned:
14:29:51 7A595700 Drvrs: PBCGOV ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.4.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="Organizational Unit"
dest-dn="OU=Enterprise,DC=iss,DC=lcl" event-id="0" scope="subtree">
<search-class class-name="Organizational Unit"/>
<search-attr attr-name="ou">
<value>ISS</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
14:29:51 7F1B8700 Drvrs: PBCGOV :Remote Interface Driver: Received
document for subscriber channel
14:29:51 7F1B8700 Drvrs: PBCGOV :Remote Interface Driver: Waiting for
receive...
14:29:51 7A595700 Drvrs: PBCGOV ST: SubscriptionShim.execute()
returned:
14:29:51 7A595700 Drvrs: PBCGOV ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20150918_120000"
instance="\DEVIV\PBC\SERVICES\Driver Set\PBCGOV"
version="4.0.2.0">AD</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying policy: Password(Pub)-Sub
Email Notifications.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying to status #1.
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'Send e-mail on a failure when subscribing to passwords'.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-operation equal "status") =
TRUE.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-xpath true "self::status[@level
!= 'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']")
= FALSE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule rejected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating selection criteria for
rule 'Send e-mail on failure to reset connected system password using
the Identity Manager data store password'.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-operation equal "status") =
TRUE.
14:29:51 7A595700 Drvrs: PBCGOV ST: (if-xpath true "self::status[@level
!= 'success']/operation-data/password-reset-status") = FALSE.
14:29:51 7A595700 Drvrs: PBCGOV ST: Rule rejected.
14:29:51 7A595700 Drvrs: PBCGOV ST: Policy returned:
14:29:51 7A595700 Drvrs: PBCGOV ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20150918_120000"
instance="\DEVIV\PBC\SERVICES\Driver Set\PBCGOV"
version="4.0.2.0">AD</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying schema mapping policies to
input.
14:29:51 7A595700 Drvrs: PBCGOV ST: Applying policy: SchemaMapping.
14:29:51 7A595700 Drvrs: PBCGOV ST: Resolving association references.
14:29:51 7A595700 Drvrs: PBCGOV ST: Query from policy result
14:29:51 7A595700 Drvrs: PBCGOV ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20150918_120000"
instance="\DEVIV\PBC\SERVICES\Driver Set\PBCGOV"
version="4.0.2.0">AD</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
14:29:51 7A595700 Drvrs: PBCGOV ST: Token Value: "".
10/20/16
14:29:51 7A595700 Drvrs: PBCGOV ST: Arg Value: "".
14:29:51 7A595700 Drvrs: PBCGOV ST: Action: do-if().
14:29:51 7A595700 Drvrs: PBCGOV ST: Evaluating conditions.
14:29:51 7A595700 Drvrs: PBCGOV ST: Query from policy
14:29:51 7A595700 Drvrs: PBCGOV ST:


--
gholdefe
------------------------------------------------------------------------
gholdefe's Profile: https://forums.netiq.com/member.php?userid=318
View this thread: https://forums.netiq.com/showthread.php?t=56737